apigee/usergrid-stack — pull request #101 by albertoleal (2013-04-30 18:04:12+00:00)
Title: HTTP 303 (See other) instead of 307 (Temporary Redirect)

Since http 307 uses the original request with a new URI to redirect the user, that is, the request method is not allowed to be changed and it should be used carefully.

Following oauth 2 spec [1], when the user issues by an access token, the Auth Server redirects user-agent back to the client via http 302. Since the Jersey's version that we're using does not implement 302, it's ok to use 303 b/c popular browsers implemented 302 with the functionality of a 303.

That's the issue I was getting: When I submitted the form to authenticate myself, I was being redirected to the redirect_uri through HTTP POST instead of HTTP GET.

I've run all the tests we have on the project and everything is still green. Do you guys have any concern about this change?

Thanks a lot,
Alberto

[1] http://tools.ietf.org/html/rfc6749#section-4.2