It'd be great if you could provide some more information about what you're trying to do:

• What is the application you're attempting to use go-oidc against?
• What point in the flow does your key?
• Do you have a reproducible program that demonstrates this?

from go-oidc.

below is the code excerpt. I'm just the example app (example/app/main.go) with pingFederate backend (it supports discovery protocol). the API that I have issue is ExchangeAuthCode in client.go
it seems the client code support these two and my provider list those two, but it error out in my case.

AuthMethodClientSecretPost = "client_secret_post"
AuthMethodClientSecretBasic = "client_secret_basic"

this is reproducible but since my setup is internal, I won't able to show it to you.

    fs := flag.NewFlagSet("go-oidc-app", flag.ExitOnError)
    listen := fs.String("listen", defaultListenHost, "serve traffic on this address (<host>:<port>)")

    redirectURL := fs.String("redirect-url", fmt.Sprintf("https://%s%s", defaultListenHost, pathCallback), "")
    clientID := fs.String("client-id","go_oidc_client","")
    clientSecret := fs.String("client-secret","some_secret_ddd", "")
    discovery := fs.String("discovery", "https://c4t22724.itcs.hpecorp.net:9031", "")

from go-oidc.

@aphuang2013 Did you mean to close this? It's perfectly fine if your setup is internal

from go-oidc.

sorry, I closed it inadvertently. I think my confusion related the authMethod support may be is the key

from go-oidc.

Is there way I can debug this further?

from go-oidc.

Sorry, I still need to get access to a pingFederate server to do testing.

from go-oidc.

Have you used golang.org/x/oauth2? Does that package give a similar error?

from go-oidc.

the oidc package already has a sample app with callback setup, I was hoping
to debug the code exchange section. the x/oauth2 does not have a sample
app, so I need to write a full app in order to try it.

On Mon, May 16, 2016 at 8:18 AM, Eric Chiang [email protected]
wrote:

Have you used golang.org/x/oauth2? Does that package give a similar error?

—
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHub
https://github.com/coreos/go-oidc/issues/82#issuecomment-219452844

peter huang

from go-oidc.

try this one: https://github.com/ericchiang/oidc/blob/master/examples/idtoken/app.go

from go-oidc.

thanks for the help, I was able to get id token now. I added the TLS
listener to your sample code so it will do proper cert stuff.

{
"OAuth2Token": {
"access_token": "REDACTED",
"token_type": "Bearer",
"refresh_token": "kJM7YKzg1cqwwjTwNveexN9ZopiOZRp99EYTznSv1i",
"expiry": "2016-05-17T07:32:45.317839882Z"
},
"IDTokenClaims": {
"sub": "[email protected]",
"email": "[email protected]",
"aud": "go_oidc_client",
"jti": "2G1eKneAl6ddKzI7vB6EfF",
"iss": "https://c4t22724.itcs.hpecorp.net:9031",
"iat": 1463463166,
"exp": 1463463466,
"acr": "urn:oasis:names:tc:SAML:2.0:ac:classes:TLSClient"
}
}

On Mon, May 16, 2016 at 9:13 PM, Eric Chiang [email protected]
wrote:

try this one:
https://github.com/ericchiang/oidc/blob/master/examples/idtoken/app.go

—
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHub
https://github.com/coreos/go-oidc/issues/82#issuecomment-219615055

peter huang

from go-oidc.

The fork where this was fixed has now been upstreamed #110

from go-oidc.