Pablo Lalloni 4464e78483 oauth2: remove scope & client_id params from access token request ...

Remove "scope" & "client_id" from "token request" in the "access token 
request" of the "authorization code grant" flow, keeping "client_id"
in case the provider is one of the known to be broken ones.

Please see https://tools.ietf.org/html/rfc6749#section-4.1.3

This change is required for interoperation with OpenAM.

Fixes golang/oauth2#145
Fixes golang/oauth2#110
Fixes golang/oauth2#188

Change-Id: Ie34c74980a6db7b5d34c851fb55a7d629fc7083e
Reviewed-on: https://go-review.googlesource.com/23790
Reviewed-by: Chris Broadfoot <cbro@golang.org>

2017-02-07 21:18:51 +00:00

..

clientcredentials_test.go

oauth2: remove scope & client_id params from access token request

2017-02-07 21:18:51 +00:00

clientcredentials.go

clientcredentials: inline singly-used functions

2016-11-03 20:06:23 +00:00