unsupported_grant_type on rest example

[Blanen]

Describe the bug
Doing the rest example with:

asgiref==3.2.3
certifi==2019.11.28
chardet==3.0.4
Django==3.0.4
django-oauth-toolkit==1.3.0
djangorestframework==3.11.0
idna==2.9
oauthlib==3.1.0
psycopg2==2.8.4
pytz==2019.3
requests==2.23.0
sqlparse==0.3.1
urllib3==1.25.8

doesn't work and simply returns this error:
{"error": "unsupported_grant_type"}

and this in the log:

Bad Request: /o/token/
[08/Mar/2020 04:31:42] "POST /o/token/ HTTP/1.1" 400 35

To Reproduce
Do the example

Expected behavior
It should work.

Version

• I have tested with the latest published release and it's still a problem.
• I have tested with the master branch and it's still a problem.

Additional context
Quite hard to believe this, honestly.

[Blanen]

The normal tutorial also mentions that it needs a valid redirect url, but the REST tutorial says nothing about it.

[baranberkay96]

OAUTH2_PROVIDER = { # parses OAuth2 data from application/json requests 'OAUTH2_BACKEND_CLASS': 'oauth2_provider.oauth2_backends.JSONOAuthLibCore', }

In your settings.py, do you have any configuration like that?

[dnjscksdn98]

I have the same error as you. Did you fix the error?

[Blanen]

@baranberkay96 yep

[Blanen]

@dnjscksdn98 nope

[dnjscksdn98]

@dnjscksdn98 nope

After I deleted 'oauth2_provider.oauth2_backends.JSONOAuthLibCore'
it worked. But I don't know why

[n2ygk]

The default value in oauth2_provider/settings.py is oauth2_provider.oauth2_backends.OAuthLibCore.
This sounds like perhaps a documentation error or otherwise incorrect workaround made in #734.

@rudolfolah Can you take a look at this and see if you can find a fix to your error that doesn't break other instances and submit a PR? Meanwhile, I'll go ahead and revert this PR for 1.3.1.

The documented token endpoint POST in RFC 6749 appears to always use Content-Type: application/x-www-form-urlencoded. Is there an alternative OAuth2 option to send the data as JSON that I am not aware of?

In scanning the code, I see JSONOAuthLibCore was added in ab1f7ab but no usage or other documentation of it at all, some I'm a bit confused.

Commented on the PR: my suggestion is to revert the example but leave the documentation and add on to the documentation to mention that the content-type header should be set.

[bobozar]

After I removed the OAUTH_PROVIDER in the settings, it worked. But I can't get 1. Authorization code [GET] and 2. Exchange the code for access token [POST] using json request. Any idea on how to go about that? I want the flow to be via json not visiting the link directly.

[bobozar]

For example, to get the AUTH CODE, I did this:

http GET http://example.io:8000/o/authorize?state=myinitialcode&response_type=code&client_id=xsddsdd

I got the below response:

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Content-Type: text/html; charset=utf-8
Date: Fri, 20 Mar 2020 14:46:16 GMT
Location: /o/authorize/?state=myinitialcode
Server: WSGIServer/0.2 CPython/3.6.8
Vary: Origin