Function pickClientAuth

packages/core/sdk/src/oauth-helpers.ts:741–749

(
  clientSecret: string | null | undefined,
  method: ClientAuthMethod,
)

// ones, so an absent secret here unambiguously means "public client". The
// `method` only chooses HOW a present secret is sent (post vs basic).
const pickClientAuth = (
  clientSecret: string | null | undefined,
  method: ClientAuthMethod,
): oauth.ClientAuth => {
  if (!clientSecret) return oauth.None();
  return method === "basic"
    ? oauth.ClientSecretBasic(clientSecret)
    : oauth.ClientSecretPost(clientSecret);
};

const normalizedTokenScope = (
  as: oauth.AuthorizationServer,