Jon @ PositJ
ZITADEL9mo ago
12 replies
Jon @ Posit

Device Authorization with Okta using zitadel/oidc

Hello! I'm attempting to use zitadel/oidc for device authorization against Okta, but I'm getting back this error from DeviceAuthorization:
ErrorType=invalid_request Description=The client_assertion_type is invalid.


This appears to be due to the client_assertion fields being included in the request even when empty. If I modify the fields in https://github.com/zitadel/oidc/blob/main/pkg/oidc/token_request.go#L243-L244 to include the omitempty attribute, device authorization against Okta works.

Is this a known issue, or is there a known workaround? I'm happy to create an issue and a PR if that helps.
Was this page helpful?