diff --git a/assets/runtime/env-defaults b/assets/runtime/env-defaults
index 8b2e256b..7c6de6d9 100644
--- a/assets/runtime/env-defaults
+++ b/assets/runtime/env-defaults
@@ -544,7 +544,7 @@ OAUTH_OIDC_SCOPE=${OAUTH_OIDC_SCOPE:-"['openid','profile','email']"}
 OAUTH_OIDC_RESPONSE_TYPE=${OAUTH_OIDC_RESPONSE_TYPE:-'code'}
 OAUTH_OIDC_ISSUER=${OAUTH_OIDC_ISSUER:-}
 OAUTH_OIDC_DISCOVERY=${OAUTH_OIDC_DISCOVERY:-true}
-OAUTH_OIDC_CLIENT_AUTH_METHOD=${OAUTH_OIDC_CLIENT_AUTH_METHOD:-'query'}
+OAUTH_OIDC_CLIENT_AUTH_METHOD=${OAUTH_OIDC_CLIENT_AUTH_METHOD:-'basic'}
 OAUTH_OIDC_UID_FIELD=${OAUTH_OIDC_UID_FIELD:-sub}
 OAUTH_OIDC_SEND_SCOPE_TO_TOKEN_EP=${OAUTH_OIDC_SEND_SCOPE_TO_TOKEN_EP:-false}
 OAUTH_OIDC_PKCE=${OAUTH_OIDC_PKCE:-true}