Re: 2.3.21.1 and oauth

Hi,

Don't you use grant_url?

As far as I can see, both versions use client's id/secret for grant_url and receive an access_token. Both use the token for introspection_url, but 2.3.20 sends id/secret with it and 2.3.21 does not.

Tested with plain auth and the following settings grant_url = http://localhost:8080/realms/test/protocol/openid-connect/token use_grant_password = yes introspection_url = http://localhost:8080/realms/test/protocol/openid-connect/token/introspect introspection_mode = post username_attribute = username client_id = dovecot client_secret = secret

Regards, Piotr