embedded user-agent support about oauth2-server

[alexbilbie]

Sorry, can you define "embedded user-agent"? Which grant auth is that in the spec (or which extension spec is it) ?

[spydr]

Sorry for confusing you, what I mean is getting the token without the need for redirect_uri like in this case: http://tools.ietf.org/html/rfc6749#section-4.3 where only the grant_type , username, and password are required

I know the library supports that but I doubt if redirect_uri is optional.

[alexbilbie]

Ah sorry you mean the password grant. Yep it does support it and if you can hold off a day or so I'll have some significantly better documentation up to show how to implement it

[spydr]

Yes the password grant. I just test if it supports the password grant, unfortunately it requires redirect_uri which in fact in such grant there are only 4 parameters namely: grant_type, username, password, and an optional scopes.

Basically what I'm trying to achieve is I have an app (trusted of course) with username and password input fields and when user clicks the button, the app will send a post request (curl or whatever) with ONLY username and password (aside from scopes which by default all scopes are granted) of the client to get the token.

[alexbilbie]

The password grant is in the develop branch https://github.com/lncd/OAuth2/blob/develop/src/Oauth2/Authentication/Server.php. However in the feature/reorg branch we've we designed the API from the ground up (hence my comment about waiting a day or so for updated docs)

[spydr]

Much appreciated, thanks.

[MichaelGooden]

This appears to be in the master branch and latest tagged versions, so this issue should be closed.