Enforce that Twitch wants credentials in request body

WebTheoryLLC / omniauth-twitch

OmniAuth Strategy for Twitch

MIT License

32 stars 22 forks source link

Enforce that Twitch wants credentials in request body #21

Closed deanpcmad closed 1 year ago

deanpcmad commented 2 years ago

The oauth2 gem has recently been updated with a breaking change that impacts this strategy: https://github.com/oauth-xx/oauth2/pull/312

oauth2 now defaults to sending client_id and secret using Basic Auth headers, instead of the request body as before. Twitch expects the client_id in the body so this PR sets auth_scheme to request_body, which was the default before v2.

This fixes #20.

I would also be interested in taking over this gem.

deanpcmad commented 2 years ago

Any update on this PR and also on my request to take the gem and repo over?