From a4aa7ef6dfa0e4693f855631db4e14735b291e0e Mon Sep 17 00:00:00 2001
From: Brian Bockelman <bbockelman@morgridge.org>
Date: Fri, 17 Nov 2023 07:41:43 -0600
Subject: [PATCH] Default to non-public clients

This template is used for dynamic client registry where a non-public
client is most likely needed.  Although clients requests can specify
explicitly request a certain client authentication method (implying a
non-public client), notably `oidc-client` does not.
---
 scitokens-server/etc/templates/client-template.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scitokens-server/etc/templates/client-template.xml b/scitokens-server/etc/templates/client-template.xml
index be788fd..c3b7487 100644
--- a/scitokens-server/etc/templates/client-template.xml
+++ b/scitokens-server/etc/templates/client-template.xml
@@ -18,7 +18,7 @@
 <entry key="debug_on">false</entry>
 <entry key="client_id">localhost:template</entry>
 <entry key="strict_scopes">false</entry>
-<entry key="public_client">true</entry>
+<entry key="public_client">false</entry>
 <entry key="forward_scopes_to_proxy">false</entry>
 <entry key="callback_uri">["https://localhost:9443/client2/ready"]</entry>
 <entry key="name">SciToken client template</entry>