fix(health): token_broker probe uses token exchange (stops 400s every 5 min) #37

Merged

KofTwentyTwo merged 1 commits from feature/broker-probe-token-exchange into develop

2026-10-16 13:48:26 +00:00

Author	SHA1	Message	Date
james.maesandClaude Opus 5.5	bc92be338f	fix(health): probe the token broker with token exchange, not client_credentials The broker provider allows only token exchange, so the client_credentials probe always got 400 (Invalid grant_type for provider). Probe with token exchange and no subject. Authentik checks grant type, then secret, then subject, so invalid_request means the credentials passed. invalid_client and invalid_grant are DOWN. Refusals carry their OAuth2 error code (BrokerRefusedException). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 07:55:32 -05:00

Author

SHA1

Message

Date

james.maesandClaude Opus 5.5

bc92be338f

fix(health): probe the token broker with token exchange, not client_credentials

The broker provider allows only token exchange, so the client_credentials
probe always got 400 (Invalid grant_type for provider). Probe with token
exchange and no subject. Authentik checks grant type, then secret, then
subject, so invalid_request means the credentials passed. invalid_client
and invalid_grant are DOWN. Refusals carry their OAuth2 error code
(BrokerRefusedException).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-16 07:55:32 -05:00