Application Authentication set to use Basic Authorization but still sends form parameters

Help
,
1

Ready to post? :mag: First, try searching for your answer.
In my Regular Web Application I’ve set the Credentials setting “Application Authentication” to use “Client Secret (Basic)” instead of “Client Secret (Post)”.
Despite this the Client ID and Client Secret get sent as form parameters instead of in a Basic “Authorization” header. It’s seemingly not an issue of waiting for the settings to propagate.

3

Hi @benjamin-iGrant

Welcome to the Auth0 Community!

Thank you for posting your question, setting “Client Secret (Basic)” in your Auth0 application’s settings does not automatically force your library to put client_id and client_secret in the Authorization header. You’ll need to adjust the library or framework that your are using to change the sending methods of client_id and secret to header.

Thanks
Dawid