Does IdentityModel.OidcClient support Private Key JWTs with certificates about identitymodel.oidcclient

[leastprivilege]

Am I just supposed to put the certificate in the ClientAssertion.Value and IdentityModle.OidcClient will use it

No - you need to create the complete assertion and set it for OidcClient to use it.

[eholyat]

I created a good assertion and when I call oidcclient.LoginAsync() it is not sending the assertion. Do I need to use the lower level IdentityModel Client to accomplish private key jwts with certs?

[leastprivilege]

IIRC no. Have you debugged it?

[eholyat]

So, what I found is that IdentityModel only adds the ClientAssertion in the token request for Private Key Jwt(IdentityModel.Client.ProtocolRequest.cs Prepare()). I expected it to also be in the authorize request, and it is not added through callling LoginAsync().
Is there another way to do this without having to change AuthorizeClient.cs? Maybe using IdentityModel.Client.HttpClientTokenRequestExtensions???

The following would have to be added to IdentityModel.OidcClient.AuthorizeClient.cs
CreateAuthorizeParameters()
...
if (_options.RedirectUri.IsPresent())
{
parameters.Add(OidcConstants.AuthorizeRequest.RedirectUri, _options.RedirectUri);
}
/Would need this code to add assertion if exists
if (_options.ClientAssertion?.Value != null)
{
parameters.Add(OidcConstants.TokenRequest.ClientAssertion, _options.ClientAssertion.Value);
parameters.Add(OidcConstants.TokenRequest.ClientAssertionType, _options.ClientAssertion.Type);
}/

[leastprivilege]

The client assertion is used on when redeeming the code. This is correct.

[brockallen]

All set on this issue -- can we close?