Function pickClientAuth

packages/core/sdk/src/oauth-helpers.ts:545–553

(
  clientSecret: string | null | undefined,
  method: ClientAuthMethod,
)

// ones, so an absent secret here unambiguously means "public client". The
// `method` only chooses HOW a present secret is sent (post vs basic).
const pickClientAuth = (
  clientSecret: string | null | undefined,
  method: ClientAuthMethod,
): oauth.ClientAuth => {
  if (!clientSecret) return oauth.None();
  return method === "basic"
    ? oauth.ClientSecretBasic(clientSecret)
    : oauth.ClientSecretPost(clientSecret);
};

const tokenResponseFrom = (r: oauth.TokenEndpointResponse): OAuth2TokenResponse => ({
  access_token: r.access_token,