oauthjs / node-oauth2-server

Complete, compliant and well tested module for implementing an OAuth2 Server/Provider with express in node.js
https://npmjs.org/package/oauth2-server
MIT License
4.03k stars 932 forks source link

Grant Types Supported? #459

Open kitsonswannff opened 7 years ago

kitsonswannff commented 7 years ago

In the documentation for this module on npmjs here: https://www.npmjs.com/package/node-oauth2-server

There is some confusing wording regarding supported grant types. Under the features section: https://www.npmjs.com/package/node-oauth2-server#features it says: Supports authorization_code, password, refresh_token, client_credentials and extension (custom) grant types.

But, under the options section https://www.npmjs.com/package/node-oauth2-server#options under grant types it says: currently the module supports password and refresh_token

The docs appear to show support for authorization code and refresh token flow. Can you clarify/fix this please. Thanks.

maxtruxa commented 7 years ago

The correct npm package is named oauth2-server. The claims made in that package's README regarding grant types are correct:

Supports authorization_code, client_credentials, refresh_token and password grant, as well as extension grants, with scopes.

Support for the implicit grant flow is pending in PR #271 as well.

In case you already started coding, note that oauth2-server is at 3.x which is not compatible with node-oauth2-server's latest version (2.x).

@mjsalinger Do you have write access to the alternate npm package? We should probably mark it as deprecated to avoid confusion in the future.