From 60e663316b201bc40b402ef1fabf68a7cd6dc8d5 Mon Sep 17 00:00:00 2001
From: Kim Alvefur <zash@zash.se>
Date: Tue, 3 Jun 2025 18:14:27 +0200
Subject: [PATCH] Declare that oauth client credentials are using POST method

Not enforced by mod_http_oauth2, but could be in the future
---
 snikket_web/prosodyclient.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/snikket_web/prosodyclient.py b/snikket_web/prosodyclient.py
index 2fbb2bf..4c62532 100644
--- a/snikket_web/prosodyclient.py
+++ b/snikket_web/prosodyclient.py
@@ -474,6 +474,7 @@ class ProsodyClient:
             ],
             "grant_types": ["password"],
             "response_types": [],
+            "token_endpoint_auth_method": "client_secret_post",
             "scope": " ".join([SCOPE_RESTRICTED, SCOPE_DEFAULT, SCOPE_ADMIN]),
             "software_version": _version.version,
         }