Skip to content
This repository was archived by the owner on Jan 17, 2023. It is now read-only.

Client secret should not be mandatory #86

Closed
wants to merge 1 commit into from

Conversation

OmarPedraza
Copy link

This issue was already reported some time ago, but those changes are disappeared after moving from AFOAuth2Client to AFOAuth2Manager.

I think it would be great to add it again.

@samskiter
Copy link

I would also like to point out that the client secret and ID shouldn't be included in the body anyway. they should be encoded using HTTP basic auth. I have already reported this here and will be submitting a PR for this soon. #85

mattt added a commit that referenced this pull request Mar 2, 2015
@mattt
Copy link
Contributor

mattt commented Mar 2, 2015

Thanks, @OmarPedraza. Due to the changes in 412d256, a different change was required with e5c00d1. Look for this in the forthcoming release.

@mattt mattt closed this Mar 2, 2015
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants