Testing about oauthd

[bettiolo]

To enable server-side Request you need to turn off the cors: true option in the provider config:

{
    "name": "Facebook",
    "desc": "...",
    "url": "https://graph.facebook.com",
    "oauth2": {
        "authorize": "https://www.facebook.com/dialog/oauth",
        "access_token": "/oauth/access_token",
        "request": {
            "cors": false, < - set to false for server-side Request
            "query": {
                "access_token": "{{token}}"
            }
        },
        [...]
    }
}

[bettiolo]

I am still wondering how to trigger the OAuth2 Refresh code path?

[bumpmann]

Indeed, there is no method to force the cors to turn off.

For the refresh code you mean refresh token ? The endpoint /auth/refresh_token/{provider} is documented at https://oauth.io/docs/api (page bottom)

[bettiolo]

You can actually turn off CORS by the settings I specified earlier. I tested it, it was already integrated in your platform.

provider.oauth[1,2].request.cors = false

[bettiolo]

@bumpmann you can actually turn off CORS by the settings I specified earlier. I tested it and it is working. It was already integrated in your platform.

<provider>.oauth2.request.cors = false

[bettiolo]

The setting <provider>.oauth2.request.cors set to false will make the server do a server-side request. If set to true it will make a client side request.