tree bf8e5803353133bad3ab4b26ef43b62839e0e765
parent 36a7019397c4c86cf59eeab3bc0d188bac444277
author Peter Dotchev <dotchev@gmail.com> 1547540974 +0000
committer Brad Fitzpatrick <bradfitz@golang.org> 1547576042 +0000

Clarify that client credentials are not passed in the URL

The term "query parameters" suggested that the credentials are passed in the URL which is insecure and is actually not true as the credentials are passed in the request body. See https://github.com/golang/oauth2/blob/36a7019397c4c86cf59eeab3bc0d188bac444277/internal/token.go#L196

Change-Id: Id0a83f8d317fed30e18310b30860000109dafe88
GitHub-Last-Rev: 3961bc9affcbdb16a6e0b4db58ce0526da8e728b
GitHub-Pull-Request: golang/oauth2#358
Reviewed-on: https://go-review.googlesource.com/c/157877
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>