Hey! Is it possible to create a client that is public

--token-endpoint-auth-method none

but also have the

gran-type: client_credentials

. Currently when you create a new client with

--token-endpoint-auth-method none

you don’t get a

client-secret

. I guess this might be something you don’t want to do?

yes 🙂 we don't support resource owner password credentials (if that is what you tried to accomplish here) https://www.ory.sh/docs/hydra/faq#why-is-the-resource-owner-password-credentials-grant-not-supported

Hmm, I guess I’m after a different flow using

client_credentials

. I’m not interested in this case to make request on the behalf of a user but instead use access the applications own resources.

ah i see, so like a machine to machine type of account

Exactly, but I’m looking for the case where the client for user auth is public using

authorization_code

with PKCE without a secret but also use some M2M auth on the backend using

client_credentials

. As you mentions it works fine when you can use a confidential client and use both id and secret but for the public case no secret is generated when creating a client making it so you are missing information go trough with the

client_credentials

flow.