Skip to content

Conversation

lnielsen
Copy link
Contributor

The unknown exception handling introduced in 0.7.0 catches all oauthlib's OAuth2Errors as well, which makes it impossible to properly handle e.g. invalid scopes. All fatal client errors will properly be reported to the resource owner, while non-fatal client errors (like invalid scope) will be reported to the client.

* Properly report non-fatal client errors to the client (like e.g.
  invalid_scope) according to http://tools.ietf.org/html/rfc6749#section-4.1.2.1
@lepture
Copy link
Owner

lepture commented Sep 1, 2014

Thanks. Merged in 3f766bb

@lepture lepture closed this Sep 1, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants