Hi I'm using generic provider to configure kratos to connect my oidc provider. I see the client and secret passed to my provider is in body but i wanted to send it via authorization header. Is there way to change this mechanism?

I think kratos uses opebid metadata endpoint to fetch supported client authentication methods. You cannot configure method choice from yml but in the code it must do autodetection, try both methods and remember which one worked.

yeah i figured out from code that it tries with both basic and post starting with basic if doesn't work it fallbacks to post