OAuth2 : is it possible to work on client_credentials without basic auth header

1

Is it possible to work on ‘client_credentials’ grant type to grant tokens just provision client_id and client_secret in post request content-body without the Authorization header (from Implied Basic Auth) ?

I think it is somewhat redundant for me :tired_face:

Sorry for my poor english…

2

I issued a request like this one :

POST /oauth2/token HTTP/1.1
Host: 10.0.3.74:8080
Content-Length: 135
Accept: /
Cache-Control: no-cache
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials&client_id=29483b4762214ecfb98f985b390e8fde&client_secret=NzZkYmIxODQtZTcxYi00MTY2LWIzMTctNTMzZWUyNWI0YmM2

and i got an error :

{“error”:“invalid_request”,“error_description”:“The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.”}

Is there any way to get it working properly?

3

I believe you will always need that header