Is Password Grant supported?

[mqf20]

Thanks for this great library!

Does it support the OAuth2.0 password grant flow?

[mqf20]

To provide some background to my request:

• I understand that the OAuth 2.0 Password Grant is not recommended and will be removed from OAuth2.1.
• However, this grant type allows developers to bootstrap OAuth2.0 with custom, third party authentication systems.

[muhlemmer]

We list supported protocols and grant types here: https://github.com/zitadel/oidc?tab=readme-ov-file#features. And no, it is not supported and we don't intend to support it for the reason you already wrote:

I understand that the OAuth 2.0 Password Grant is not recommended and will be removed from OAuth2.1.

However, this grant type allows developers to bootstrap OAuth2.0 with custom, third party authentication systems.

There are other grant types that allow for this:

• Client Credentials: very similar to password grant, uses a secret in the client_secret form fields instead.
• JWT Profile: uses a self-singed token as secret to authenticate.

[mqf20]

Thanks for the explanation