[BUG]: Docs should not say public client is required

[brantlk]

Describe the bug

This is in https://github.com/fccview/jotty/blob/main/howto/SSO.md , it says "Configure your OIDC Provider:" "Client Type: Public". Because of this I configured the Authelia client with public: true. Then Authelia failed to start:

... level=error msg="Configuration: identity_providers: oidc: clients: client 'jotty1': option 'client_secret' is required to be empty when option 'public' is true"

I removed the public: true setting from the Authelia configuration and things are working.

Jotty supports confidential clients so the docs shouldn't say that clients must be public.

Steps to Reproduce

Docs issue.

How do you run Jotty?

Docker

Jotty Version

1.20.0

Checklist

• I have searched across other issues to make sure this bug has not been already reported.

[fccview]

Hi.
Before I change anything, is PKCE enabled on your Authelia?

[brantlk]

I'm no Authelia expert. The Jotty SSO documentation says "Grant Type: Authorization Code with PKCE" so I looked for a setting to use PKCE and authorization code grant type. Here's the whole client config in Authelia that worked:

    clients:
      - client_id: jotty
        client_secret: $pbkdf2-...
        grant_types:
          - authorization_code
        redirect_uris:
          - https://jotty.example.com/api/oidc/callback
        require_pkce: true
        pkce_challenge_method: S256
        token_endpoint_auth_method: client_secret_post

This might also work without require_pkce: true. I didn't try it. The documentation ( https://www.authelia.com/configuration/identity-providers/openid-connect/clients/#require_pkce ) doesn't say much.

I added token_endpoint_auth_method: client_secret_post after getting a failure page and error message in the Authelia log.

[fccview]

Thank you, that helps a lot!

I'll investigate this further, just for context I thoight that flag I mention in the SSO configuration was mandatory for PKCE, which is why is there

Will update you and potentially the documentation when I have a more reliable answer ♥️