tree 1f686592afa3e2b37c52e029101f27980204e8b5
parent 314dd2c0bf3ebd592ec0d20847d27e79d0dbe8dd
author Pablo Lalloni <plalloni@gmail.com> 1465013514 -0300
committer Chris Broadfoot <cbro@golang.org> 1486502331 +0000

oauth2: remove scope & client_id params from access token request

Remove "scope" & "client_id" from "token request" in the "access token 
request" of the "authorization code grant" flow, keeping "client_id"
in case the provider is one of the known to be broken ones.

Please see https://tools.ietf.org/html/rfc6749#section-4.1.3

This change is required for interoperation with OpenAM.

Fixes golang/oauth2#145
Fixes golang/oauth2#110
Fixes golang/oauth2#188

Change-Id: Ie34c74980a6db7b5d34c851fb55a7d629fc7083e
Reviewed-on: https://go-review.googlesource.com/23790
Reviewed-by: Chris Broadfoot <cbro@golang.org>