Token endpoint POST constraint about fosoauthserverbundle HOT 3 OPEN

Also, there's a client type missing in the implementation (Section 2.1):

"The authorization server SHOULD NOT make assumptions about the client type."

As I have noticed this bundle is partly based on a outdated client-side implementation of OAuth2, which on it's part is based on the OAuth2 draft version 10. This version of the documentation does not seem to reckon the definition of a client_type.

Of course, developers may implement these changes themselves, but they might need to be notified if they wish to be fully compatible with the official protocol requirements.

from fosoauthserverbundle.

This bundle only implements the server side of OAuth, not the client side

from fosoauthserverbundle.

I'm aware of that, but the client_type should be registered server-side. Like Facebook's web/native option. According to the documentation it's required to determine a client's trustworthiness and decide whether to use different approaches.

I could be wrong and I have no clue how much of an impact it would be if I would be right... But if I am wrong, I'd really love some clearance on the subject :S

My apologies, the error_response was correct. I had not tested it correctly. (Removed it from my comment)

from fosoauthserverbundle.