OAuth2TokenVerify introspect AZURE Tenant grant_type

[pelord]

Hi

Here my config.

        <If "%{QUERY_STRING} =~ /PATH/">
                AuthType oauth2
                LogLevel debug oauth2:trace5  
                OAuth2TokenVerify introspect https://login.microsoftonline.com/{TENANT}/oauth2/v2.0/token introspect.ssl_verify=false&introspect.auth=client_secret_basic&client_id={CLIENT_ID}&client_secret={CLIENT_SECRET}
                Require valid-user
        </If>

The log provide me this error!

{
  "error": "invalid_request",
  "error_description": "AADSTS900144: The request body must contain the following parameter: 'grant_type'. Trace ID: {trace_id} Correlation ID: {correlation_id} Timestamp: 2025-02-05 20:23:00Z",
  "error_codes": [900144],
  "timestamp": "2025-02-05 20:23:00Z",
  "trace_id": "{trace_id}",
  "correlation_id": "{correlation_id}",
  "error_uri": "https://login.microsoftonline.com/error?code=900144"
}

Any clues?

[zandbelt]

see https://stackoverflow.com/questions/43378748/does-azure-active-directory-have-an-oauth-openid-connect-token-introspection-end