Fix #392: Now using array as default value for `token_endpoint_auth_m…

…ethods_supported` in `OpenIdConnect::applyClientCredentialsToRequest()`
yiisoft · Sep 9, 2024 · d912a65 · d912a65
1 parent 6fe2ee3
commit d912a65
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,7 +4,7 @@ Yii Framework 2 authclient extension Change Log
 2.2.17 under development
 ------------------------
 
-- no changes in this release.
+- Bug #392: Now using array as default value for `token_endpoint_auth_methods_supported` in `OpenIdConnect::applyClientCredentialsToRequest()` (strtob, rhertogh)
 
 
 2.2.16 May 10, 2024

diff --git a/src/OpenIdConnect.php b/src/OpenIdConnect.php
@@ -365,7 +365,7 @@ protected function initUserAttributes()
      */
     protected function applyClientCredentialsToRequest($request)
     {
-        $supportedAuthMethods = $this->getConfigParam('token_endpoint_auth_methods_supported', 'client_secret_basic');
+        $supportedAuthMethods = $this->getConfigParam('token_endpoint_auth_methods_supported', ['client_secret_basic']);
 
         if (in_array('client_secret_basic', $supportedAuthMethods)) {
             $request->addHeaders([
@@ -400,7 +400,7 @@ protected function applyClientCredentialsToRequest($request)
                 'assertion' => $assertion,
             ]);
         } else {
-            throw new InvalidConfigException('Unable to authenticate request: none of following auth methods is suported: ' . implode(', ', $supportedAuthMethods));
+            throw new InvalidConfigException('Unable to authenticate request: none of following auth methods is supported: ' . implode(', ', $supportedAuthMethods));
         }
     }