POST /token in body, not in url

[gabrielsroka]

on

okta-sdk-python/okta/oauth.py

Lines 47 to 58 in d896f65

	parameters = {
	'grant_type': 'client_credentials',
	'scope': ' '.join(self._config["client"]["scopes"]),
	'client_assertion_type':
	'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
	'client_assertion': jwt
	}
	encoded_parameters = urlencode(parameters, quote_via=quote)
	org_url = self._config["client"]["orgUrl"]
	url = f"{org_url}{OAuth.OAUTH_ENDPOINT}?" + \
	encoded_parameters

it should send the params in the body, not in the query string.

spec: https://datatracker.ietf.org/doc/html/rfc6749#page-30

see also node SDK

https://github.com/okta/okta-sdk-nodejs/blob/895d48c9bf4e2e1d0d2fadcf0a84cc550e301851/src/oauth.js#L56-L64