Discussions

Ask a Question
Back to All

Connection Widget Token Endpoint Authentication Methods

I tried to email your Jira but didn't get any response

I'm currently in the process of integrating our system with your connection widget. As part of this, I'm attempting to exchange a userId for an id token to fetch necessary details.

I've found that this exchange only functions correctly when using client basic credentials as the 'Token endpoint authentication method'. However, it seems that this method is prohibited for live credentials. Everything works as expected within the sandbox environment.

Could you please clarify why this restriction exists and suggest a workaround for live credentials?

Example request:
POST https://identity.moneyhub.co.uk/oidc/token
Authorization: <client_id>:<client_secret>
grant_type=client_credentials&sub=<user_id>&scope=accounts:read accounts_details:read transactions:read:all affordability:read affordability:write