lepture/flask-oauthlib — pull request #86 by stianpr (2014-03-21 15:14:43+00:00)
Title: Support client authentication for authorization-code grant type

When using a confidential client it should be possible to obtain a token through authorization code grant type with a valid code.

In some cases you want to authenticate the client when using authorization code grant type. Though as it is implemented now you to have the client_id in the body. Which is not really required when a token was obtained with client_credentials... I'm not 100% sure on how this should be, but at least authorization_code is working with non-confidential clients also with this implementation.

https://github.com/idan/oauthlib/blob/master/oauthlib/oauth2/rfc6749/request_validator.py#L22