Client Authentication method is not respected


(Arie Gofer) #1

The field “Client authentication” has two options, suggesting different behavior should happen.
In both cases, you send the credentials both on the Auth header and on the body.
image