Parse OAuth Authorization header when request omits client secret#21351

Merged

wxiaoguang merged 3 commits intogo-gitea:mainfrom hickford:oauth-ease

Oct 7, 2022

+21-2

Commits on Oct 6, 2022

This fixes error "unauthorized_client: invalid client secret" when client includes secret in Authorization header rather than request body. OAuth spec permits both: https://www.rfc-editor.org/rfc/r…
hickford
committed
Merge branch 'main' into oauth-ease
wxiaoguang
authored
Merge branch 'main' into oauth-ease
zeripath
authored