Server wants the client secret sent another way

What it means

The server named the client authentication it requires (for example HTTP Basic). The secret itself may well be right.

Switch --auth to the method the server names: client_secret_basic sends the secret in the Authorization header, client_secret_post in the form body.

server responseSMART launcher (launch.smarthealthit.org)

{
  "error": "invalid_request",
  "error_description": "Basic authentication is required for confidential clients"
}

Run your login and smart-doctor ranks this cause against the others, with the evidence it found.

npx smart-doctor check my-profile

Already have the server’s error? Explain it without running anything.

npx smart-doctor explain '{"error":"invalid_request","error_description":"Basic authentication is required for confidential clients"}'