TT-13185, fixed max allowed authorize types to 1

TykTechnologies · Oct 24, 2024 · 816137d · 816137d
1 parent ff94667
commit 816137d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/gateway/mw_oauth2_auth.go b/gateway/mw_oauth2_auth.go
@@ -163,7 +163,7 @@ func getOAuthHeaderProvider(oauthConfig apidef.UpstreamOAuth) (OAuthHeaderProvid
 	}
 
 	switch {
-	case len(oauthConfig.AllowedAuthorizeTypes) > 2:
+	case len(oauthConfig.AllowedAuthorizeTypes) > 1:
 		return nil, fmt.Errorf("both client credentials and password authentication are provided")
 	case oauthConfig.AllowedAuthorizeTypes[0] == ClientCredentialsAuthorizeType:
 		return &ClientCredentialsOAuthProvider{}, nil