[CXF-7788] Support POST method for OAuth authorization service

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.2.6
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 12/Jul/18 10:01
• Updated: 25/Mar/19 12:28
• Resolved: 12/Jul/18 10:53

Description

The OAuth 2.0 spec says that:

"The authorization server MUST support the use of the HTTP "GET" method [RFC2616] for the authorization endpoint and MAY support the use of the "POST" method as well."

The OIDC spec says:

"Authorization Servers MUST support the use of the HTTP GET and POST methods defined in RFC 2616 [RFC2616] at the Authorization Endpoint."

So we should support the POST method as well.