Current implementation retrieves bearer access token from entity-body...

...only if its POST request. Bearer token usage spec states that other HTTP methods are suitable too.