search

demianbrecht / sanction

A dead simple OAuth2 client implementation.
MIT License
189 stars 43 forks source link

Allow presenting access token in Authorization headers #4

Closed Raekkeri closed 12 years ago

Raekkeri commented 12 years ago

Hi,

here's a small modification to "Optionally present the access token in Authorization headers. Support "Bearer" authorization method."

If you are interested in applying this feature to your repository, let me know and I can do a cleaner version if needed. Or feel free to modify.

demianbrecht commented 12 years ago

The only problem with this is that it doesn't support the entire RFC and actually factors one half of the types out (http://tools.ietf.org/html/draft-ietf-oauth-v2-26#section-7.1). I know that MAC token types are hardly ever used, but the intention is to support the entire spec. I'll think on this a little more when I get a chance. I agree that it's a good idea to support header transfer (I had initially written in support for it) so will happily integrate the change once it's cleaned up to support at least the two current token types. Closing this particular request though, feel free to submit another if you get to it before I do :)