Merge pull request #610 from jabbera/remove-get-params

Don't send POST params on query string also
jupyterhub · May 3, 2023 · 921824c · 921824c
2 parents c4d6db2 + 30e8ee8
commit 921824c
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/oauthenticator/oauth2.py b/oauthenticator/oauth2.py
@@ -635,10 +635,9 @@ async def get_token_info(self, handler, params):
 
         Called by the :meth:`oauthenticator.OAuthenticator.authenticate`
         """
-        url = url_concat(self.token_url, params)
 
         token_info = await self.httpfetch(
-            url,
+            self.token_url,
             method="POST",
             headers=self.build_token_info_request_headers(),
             body=urlencode(params).encode("utf-8"),