User Details
User Details
- User Since
- Oct 25 2016, 1:54 AM (521 w, 3 d)
- Availability
- Available
Oct 28 2016
Oct 28 2016
wrl added a comment to T11794: OAuth Server Doesn't Handle Client ID and Secret in HTTP Basic Auth.
I've done some more digging as well and it appears that this issue arose in the Go library already: https://github.com/golang/oauth2/issues/111
wrl added a comment to T11794: OAuth Server Doesn't Handle Client ID and Secret in HTTP Basic Auth.
It seems like section 2.3.1 is poorly worded. They talk about a "client password" but the example request only includes client_secret as a POST variable. In the case of the Golang OAuth2 module (which Concourse uses), it sets the basic auth username to the client ID and the password to the client secret (https://github.com/golang/oauth2/blob/master/internal/token.go#L164).
wrl added a revision to T11794: OAuth Server Doesn't Handle Client ID and Secret in HTTP Basic Auth: Unknown Object (Differential Revision).
Oct 25 2016
Oct 25 2016
wrl added a comment to T11783: Diffusion Post-Push Webhooks.
Well, I was going to overclock my toaster, but I got some e-mail about a recall because of DNS or whatever.
wrl added a comment to T11783: Diffusion Post-Push Webhooks.
Much appreciated.