OAuth2: Revocation with Basic auth no longer possible

**Describe the bug**

When using the revocation endpoint, an error code ``401`` is returned even though client authentication is valid.

**How to reproduce**

* Call ``RevocationEndpoint.create_revocation_response`` with a ``headers`` dictionary containing the client authorization.
* Notice that this parameter is ignored completely. Clearly, it is overridden instantly:

https://github.com/oauthlib/oauthlib/blob/20d116c0db616285ca48ef1591a8a79796a76f5d/oauthlib/oauth2/rfc6749/endpoints/revocation.py#L41-L67

**Expected behavior**

I expected this parameter to be respected

**Additional context**

* OAuth2
* This happened with django-oauth-toolkit after upgrading to oauthlib 3.0.0
* We're implementing a provider

	def create_revocation_response(self, uri, http_method='POST', body=None,
	headers=None):
	"""Revoke supplied access or refresh token.


	The authorization server responds with HTTP status code 200 if the
	token has been revoked sucessfully or if the client submitted an
	invalid token.

	Note: invalid tokens do not cause an error response since the client
	cannot handle such an error in a reasonable way. Moreover, the purpose
	of the revocation request, invalidating the particular token, is
	already achieved.

	The content of the response body is ignored by the client as all
	necessary information is conveyed in the response code.

	An invalid token type hint value is ignored by the authorization server
	and does not influence the revocation response.
	"""
	headers = {
	'Content-Type': 'application/json',
	'Cache-Control': 'no-store',
	'Pragma': 'no-cache',
	}
	request = Request(
	uri, http_method=http_method, body=body, headers=headers)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

OAuth2: Revocation with Basic auth no longer possible #644

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Uh oh!

OAuth2: Revocation with Basic auth no longer possible #644

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions