Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Fix client_id in web request body #505

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 29, 2018
Merged

Fix client_id in web request body #505

merged 1 commit into from
Jan 29, 2018

Conversation

Diaoul
Copy link
Contributor

@Diaoul Diaoul commented Nov 28, 2017

Previously, client_id was always included in the request body in the Authorization Code flow and the client_id parameter was ignored in contradiction with the docs. Fixes #495.

Previously, cliend_id was always included in the request body
in the Authorization Code flow and the client_id parameter
was ignored in contradiction with the docs.
Fixes #495
@Diaoul
Copy link
Contributor Author

Diaoul commented Dec 5, 2017

Any updates on this? Works for me (that's a start).

@skion
Copy link
Member

skion commented Dec 12, 2017

Let me try to restate the problem since it took me a while to understand what you are trying to solve:

According to the spec, the client_id parameter must be sent for unauthenticated clients, but is preferably NOT sent in the token request body for confidential clients, as in that case the preferred mechanism to authenticate the client is via HTTP Basic auth. However, the WebApplication class always includes it (which breaks some servers) plus offers no mechanism to remove it.

If my understanding is correct, then I think your fix is also correct 👍

@Diaoul
Copy link
Contributor Author

Diaoul commented Dec 13, 2017 via email

@thedrow thedrow merged commit d7fc133 into oauthlib:master Jan 29, 2018
@skion skion mentioned this pull request Mar 9, 2018
@skion skion changed the title Fix cliend_id in web request body Fix client_id in web request body Mar 17, 2018
@skion skion added this to the 3.0.0 milestone Mar 17, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants