Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Skip authentication for direct POST on endpoint
The solution fixes a problem of automation when user should get an authorization code to send it to a client to exchange to token(hashikorp vault in example). ``` curl -k -vvv -sXPOST "http://127.0.0.1:8000/authorize/" -d"grant_type=authorization_code&response_type=code&client_id=testvault&username=xxx&password=xxx&redirect_uri=http://127.0.0.1:8000&scope=openid profile&allow=1" ``` will look like ``` curl -k -vvv -sXPOST "http://127.0.0.1:8000/authorize/" -d"grant_type=authorization_code&response_type=code&client_id=testvault&username=xxx&password=xxx&redirect_uri=http://127.0.0.1:8000&scope=openid profile" ``` as it should.
- Loading branch information