be136eacb4
By default we include both authentication data in both the Authorization header, and in the request body. This provides maximum compatibility, although is technically a breach of the OAuth2 specification. This commit introduces a new site setting `oauth2_send_auth_body`, which allows the behavior to be controlled. |
||
|---|---|---|
| .. | ||
| locales | ||
| settings.yml | ||