caffeinehit/django-oauth2-provider — pull request #22 by pennersr (2013-06-02 20:46:55+00:00)
Title: Cross-domain access to /oauth2/access-token

/oauth2/access-token properly features a CSRF decorator, but is missing the required CORS headers in order to post to the URL cross-domain from Javascript.