{"action":"created","issue":{"url":"https://api.github.com/repos/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1157","repository_url":"https://api.github.com/repos/mitreid-connect/OpenID-Connect-Java-Spring-Server","labels_url":"https://api.github.com/repos/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1157/labels{/name}","comments_url":"https://api.github.com/repos/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1157/comments","events_url":"https://api.github.com/repos/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1157/events","html_url":"https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1157","id":194602144,"number":1157,"title":"Client Implicit Flow!","user":{"login":"jimmy-khalifa","id":7313857,"avatar_url":"https://avatars.githubusercontent.com/u/7313857?v=3","gravatar_id":"","url":"https://api.github.com/users/jimmy-khalifa","html_url":"https://github.com/jimmy-khalifa","followers_url":"https://api.github.com/users/jimmy-khalifa/followers","following_url":"https://api.github.com/users/jimmy-khalifa/following{/other_user}","gists_url":"https://api.github.com/users/jimmy-khalifa/gists{/gist_id}","starred_url":"https://api.github.com/users/jimmy-khalifa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jimmy-khalifa/subscriptions","organizations_url":"https://api.github.com/users/jimmy-khalifa/orgs","repos_url":"https://api.github.com/users/jimmy-khalifa/repos","events_url":"https://api.github.com/users/jimmy-khalifa/events{/privacy}","received_events_url":"https://api.github.com/users/jimmy-khalifa/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-12-09T13:55:09Z","updated_at":"2016-12-09T15:10:38Z","closed_at":"2016-12-09T15:10:38Z","body":"Hey,\r\nWe have an identityServer3 and I am trying to make a J2EE app use the SSO. I have a problem reaching the server proparly because the built url uses response_type=code (I saw it hard coded in the project openid-connect-client in the class SignedAuthRequestUrlBuilder --> buildAuthRequestUrl \r\n`claims.claim(\"response_type\", \"code\");`\r\nThis is the request url I get\r\n`https://server/connect/authorize?response_type=code&client_id=app&scope=openid+email+profile &redirect_uri=http://localhost:9470/app/openid_connect_login&nonce=4f3861a74a5e&state=38f11deb0460a`\r\nand I get `The client application is not known or is not authorized.`\r\nwhen I use response_type=id_token token i get redirected to the login page \r\n`https://server/connect/authorize?response_type=id_token token&client_id=app&scope=openid+email+profile &redirect_uri=http://localhost:9470/app/openid_connect_login&nonce=4f3861a74a5e&state=38f11deb0460a`\r\nI tried adding \r\n`<property name=\"grantTypes\"><set value-type=\"java.lang.String\">\t\t\t<value>implicit</value></set></property>` But naturally it doesn't have any effect.\r\nDoes this mean we can't make an implicit flow !! Or am I missing something ?\r\n\r\nThank you "},"comment":{"url":"https://api.github.com/repos/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/comments/266036483","html_url":"https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1157#issuecomment-266036483","issue_url":"https://api.github.com/repos/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1157","id":266036483,"user":{"login":"jricher","id":122511,"avatar_url":"https://avatars.githubusercontent.com/u/122511?v=3","gravatar_id":"","url":"https://api.github.com/users/jricher","html_url":"https://github.com/jricher","followers_url":"https://api.github.com/users/jricher/followers","following_url":"https://api.github.com/users/jricher/following{/other_user}","gists_url":"https://api.github.com/users/jricher/gists{/gist_id}","starred_url":"https://api.github.com/users/jricher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jricher/subscriptions","organizations_url":"https://api.github.com/users/jricher/orgs","repos_url":"https://api.github.com/users/jricher/repos","events_url":"https://api.github.com/users/jricher/events{/privacy}","received_events_url":"https://api.github.com/users/jricher/received_events","type":"User","site_admin":false},"created_at":"2016-12-09T15:10:38Z","updated_at":"2016-12-09T15:10:38Z","body":"The implicit flow is only for in-browser javascript clients. As our client library is for server-side java applications, it does not support the implicit flow. If you're trying to use the implicit flow with a J2EE application, you're not using OAuth/OIDC appropriately. The IdentityServer3 project should support the authorization code flow as well, so configure your server to use that for this client."}}
{"actor":{"display_login":"jricher"}}