Function validateClientCredentials

validateClientCredentials(
__namedParameters: validateClientCredentialsParams,
config: ValidateClientCredentialsConfig,
): Promise<{ client: OauthClient }>
Validates client credentials using confidential, public, or attested client modes.

Why (Security)
Strong client authentication blocks unauthorized token and authorization operations.

Specifications
- RFC 6749 (OAuth 2.0 Authorization Framework) Section 2.3, client authentication
- RFC 6749 (OAuth 2.0 Authorization Framework) Section 3.2.1, token endpoint client checks
- OAuth client attestation draft profiles
Parameters
- __namedParameters: validateClientCredentialsParams
- config: ValidateClientCredentialsConfig
Returns Promise<{ client: OauthClient }>
- Defined in packages/server-core/src/statements/validations/validateClientCredentials.ts:31