search

nfroidure / whook

Build strong and efficient REST web services.
https://slides.com/nfroidure/introducing-whook
MIT License
31 stars 5 forks source link

Support all OAuth2 client password mecanisms #57

Closed nfroidure closed 4 years ago

nfroidure commented 4 years ago

As described here : https://tools.ietf.org/html/rfc6749#section-2.3.1

Currently we lack ok the body / query params methods.

nfroidure commented 4 years ago

Closing since per the spec :

Alternatively, the authorization server MAY support including the client credentials in the request-body

MAY means no required ;). Since most APIs are using JSON, this usage should be very limited.

Anyway anyone willing to implement this coud easily achieve it by wrapping the httpTransaction or httpRouter to do it.