Method Validate

oauthex/client.go:37–57

Validate checks that the ClientCredentials are properly configured. It ensures that: - ClientID is not empty. - At most one authentication method is configured. - If ClientSecretAuth is set, ClientSecret is not empty.

()

//   - At most one authentication method is configured.
//   - If ClientSecretAuth is set, ClientSecret is not empty.
func (c *ClientCredentials) Validate() error {
	if c.ClientID == "" {
		return errors.New("ClientID is required")
	}

	// Count how many auth methods are configured.
	authMethodCount := 0
	if c.ClientSecretAuth != nil {
		authMethodCount++
		if c.ClientSecretAuth.ClientSecret == "" {
			return errors.New("ClientSecret is required when using ClientSecretAuth")
		}
	}

	// Allow zero auth methods (public client) or exactly one auth method.
	if authMethodCount > 1 {
		return errors.New("only one client authentication method can be configured")
	}

	return nil
}