okta / okta-sdk-python

Apache License 2.0
239 stars 142 forks source link

POST /token in body, not in url #384

Open gabrielsroka opened 10 months ago

gabrielsroka commented 10 months ago

on https://github.com/okta/okta-sdk-python/blob/d896f65ceab0671e64945525a84af6ce389fdd1d/okta/oauth.py#L47-L58

it should send the params in the body, not in the query string.

spec: https://datatracker.ietf.org/doc/html/rfc6749#page-30

see also node SDK

https://github.com/okta/okta-sdk-nodejs/blob/895d48c9bf4e2e1d0d2fadcf0a84cc550e301851/src/oauth.js#L56-L64