By: Mirko Teodorovic user 19 Mar 2019 at 8:58 a.m. CDT

4 Responses
Mirko Teodorovic gravatar
WHen following example from the https://nat.sakimura.org/2014/12/10/making-a-javascript-openid-connect-client/ and https://gluu.org/docs/ce/2.4.4/integration/oauth-js-implicit/ I would expect that authantication works Server responded with {"error":"unauthorized_client","error_description":"The client is not authorized to request an access token using this method.","state":"kja71l"} my page is at https://portal.solidsense-gluu.tk/ my gluu server is at https://gluu-auth.tk OPENID CONNECT CLIENTS DETAILS ------------------------------ - **Name:** ng-portal - **Client ID:** @!1DA9.BCB4.7B32.B721!0001!022F.4EED!0008!9D4A.6A20.6243.F014 - **Subject Type:** pairwise - **Expirattion date:** Sun Mar 19 00:00:00 UTC 2119 - **ClientSecret:** XXXXXXXXXXX - **Application Type:** web - **Persist Client Authorizations:** true - **Pre-Authorization:** false - **Authentication method for the Token Endpoint:** client_secret_basic - **Logout Session Required:** false - **Include Claims In Id Token:** false - **Disabled:** false - **Login Redirect URIs:** [https://portal.solidsense-gluu.tk/login-callback.html] - **Grant types:** [implicit, authorization_code, client_credentials, password, refresh_token, urn:ietf:params:oauth:grant-type:uma-ticket] - **Response types:** [code, token, id_token]

By Michael Schwartz Account Admin 19 Mar 2019 at 9:59 a.m. CDT

Michael Schwartz gravatar
For an implicit client: * you should have only grant type: `implicit` * response type: `token id_token` * Authentication method for the Token Endpoint: n/a--implicit flow doesn't use the token endpoint Also, just taking a quick look at the html source for your page... the client_id is the inum not the name.

By Aliaksandr Samuseu staff 19 Mar 2019 at 10:22 a.m. CDT

Aliaksandr Samuseu gravatar
Hi, Mirko. Michael has already made some good points. In addition, could you share a HAR file with a capture of your failing flow? You can use steps listed [here](https://www.inflectra.com/support/knowledgebase/kb254.aspx) - please use Firefox for that task, Chrome's HARs are flawed. Also don't forget to set "Persist log" and "Disable cache" checkboxes in the console to save everything, not just the recently loaded page.

By Aliaksandr Samuseu staff 19 Mar 2019 at 10:24 a.m. CDT

Aliaksandr Samuseu gravatar
Also, try to run `# tail -F /opt/gluu/jetty/oxauth/logs/oxauth.log` when re-trying your flow, then share any relevant entries you may see in the log here.

By Mirko Teodorovic user 19 Mar 2019 at 1:12 p.m. CDT

Mirko Teodorovic gravatar
thanks Michael, changing client_id, that worked