add a note that private_key_jwt must come after OIDCPrivateKeyFiles

see #1223 Signed-off-by: Hans Zandbelt <hans.zandbelt@openidc.com>
OpenIDC · May 29, 2024 · 652ab1b · 652ab1b
1 parent 61b4eea
commit 652ab1b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/auth_openidc.conf b/auth_openidc.conf
@@ -100,7 +100,7 @@
 #OIDCProviderTokenEndpoint <token_endpoint>
 
 # Authentication method for the OpenID Connect Provider Token Endpoint.
-# When "private_key_jwt" is used, OIDCPrivateKeyFiles and OIDCPublicKeyFiles must have been set.
+# When "private_key_jwt" is used, OIDCPrivateKeyFiles and OIDCPublicKeyFiles must have been set before this directive is applied.
 # When not defined the default method from the specification is used, i.e. "client_secret_basic".
 # Used when OIDCProviderMetadataURL is not defined or the metadata obtained from that URL does not set it.
 # NB: this can be overridden for dynamic client registration on a per-OP basis in the .conf file using the key: token_endpoint_auth