[OLTU-163] GrantType password and Missing parameters: client_secret

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: oauth2-1.0.0
• Component/s: oauth2-authzserver
• Environment: JBOSS 8 (wildfly) ; JDK 1.7
• Assignee: Unassigned
• Reporter: alizarion
• Created: 19/Nov/14 20:50
• Updated: 14/Sep/15 12:45
• Resolved: 14/Sep/15 12:45

Description

when i try to parse request with grant_type=password and there is no client_secret, OAuthTokenRequest throw Missing parameters.

client_secret is not required for a GrantType password
https://tools.ietf.org/html/rfc6749#section-4.3.2

Issue Links

• is part of: OLTU-179 Client credentials should only be required for the client credentials flow