Getting `unsupported_grant_type` due to `$request->getParsedBody()` being empty about oauth2-bundle HOT 6 CLOSED

For some reason, content-type: application/x-www-form-urlencoded works and not application/json

curl --request POST \
  --url https://localhost:8080/oauth/token \
  --header 'content-type: application/x-www-form-urlencoded' \
  --data client_id=CLIENT_ID \
  --data client_secret=SECRET \
  --data grant_type=password \
  --data '[email protected]' \
  --data 'password=mypassword'

from oauth2-bundle.

I think the reason is in Section 4.1.3 from RFC 6749:

The client makes a request to the token endpoint by sending the
following parameters using the "application/x-www-form-urlencoded"
format per Appendix B with a character encoding of UTF-8 in the HTTP
request entity-body

If you need to support application/json content type, maybe you can write a custom grant type.

from oauth2-bundle.

@ajgarlag Thanks for that info. If I am going to write my custom grant type, can I do it on top of trikoder/oauth2-bundle or would you know if there is a configuration where I can attach that custom grant type?

from oauth2-bundle.

I think this bundle does not support custom grant type. Maybe you can open a PR to support it.

from oauth2-bundle.

I'm not sure that even the League Oauth2 server itself supports adding custom grant types. If there is a possibility for that then we welcome any PR that would make that possible in our bundle as well.

from oauth2-bundle.

I took a look in the League code, it is possible to do this. We will follow the progress for that through issue #143

from oauth2-bundle.