feat(server): allow using client_id & secret from basic auth header in token endpoint

Merge pull request #270 from authorizerdev/fix/oauth-provider
fix(server): authorizer openid flow
2022-11-16 22:40:45 +05:30 · 2022-11-16 12:27:30 +05:30
1 changed files with 6 additions and 0 deletions
--- a/server/handlers/token.go
+++ b/server/handlers/token.go
@@ -64,6 +64,12 @@ func TokenHandler() gin.HandlerFunc {
 			})
 		}

+		// check if clientID & clientSecret are present as part of
+		// authorization header with basic auth
+		if clientID == "" && clientSecret == "" && codeVerifier == "" {
+			clientID, clientSecret, _ = gc.Request.BasicAuth()
+		}
+
 		if clientID == "" {
 			log.Debug("Client ID is empty")
 			gc.JSON(http.StatusBadRequest, gin.H{
Author	SHA1	Message	Date
Lakhan Samani	67be8ae285	feat(server): allow using client_id & secret from basic auth header in token endpoint	2022-11-16 22:40:45 +05:30
Lakhan Samani	f9d2130c65	Merge pull request #270 from authorizerdev/fix/oauth-provider fix(server): authorizer openid flow	2022-11-16 12:27:30 +05:30