search

bshaffer / oauth2-server-bundle

OAuth2 for your Symfony Application
MIT License
106 stars 72 forks source link

Scope is not required in Client Credentials grant type #39

Closed lhpalacio closed 3 years ago

lhpalacio commented 9 years ago

The scope in the request should be optional. https://tools.ietf.org/html/rfc6749#section-4.4.1

Request:

curl https://api.mysite.com/token -d 'grant_type=client_credentials&client_id=TestClient&client_secret=TestSecret'

Response:

{
    "error": "invalid_scope",
    "error_description": "This application requires you specify a scope parameter"
}