authn: Force auth style in oauth2 client credentials authn (#267)

Closes #260
ory · Sep 26, 2019 · 97d7890 · 97d7890
1 parent 4e4bd93
commit 97d7890
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/pipeline/authn/authenticator_oauth2_client_credentials.go b/pipeline/authn/authenticator_oauth2_client_credentials.go
@@ -8,9 +8,10 @@ import (
 
 	"golang.org/x/oauth2"
 
-	"github.com/ory/oathkeeper/driver/configuration"
 	"github.com/ory/x/httpx"
 
+	"github.com/ory/oathkeeper/driver/configuration"
+
 	"github.com/ory/oathkeeper/pipeline"
 
 	"github.com/pkg/errors"
@@ -80,6 +81,7 @@ func (a *AuthenticatorOAuth2ClientCredentials) Authenticate(r *http.Request, con
 		ClientSecret: password,
 		Scopes:       cf.Scopes,
 		TokenURL:     cf.TokenURL,
+		AuthStyle:    oauth2.AuthStyleInHeader,
 	}
 
 	token, err := c.Token(context.WithValue(