Merge pull request #62 from ctriant/client-credentials-pkce

Ignore PKCE for client credentials grant

Author: rohe

src/idpyoidc/server/oauth2/token_helper/client_credentials.py

@@ -3,7 +3,9 @@
 from typing import Union
 
 from idpyoidc.message import Message
+from idpyoidc.message.oauth2 import CCAccessTokenRequest
 from idpyoidc.time_util import utc_time_sans_frac
+from idpyoidc.util import sanitize
 from . import TokenEndpointHelper
 
 logger = logging.getLogger(__name__)
@@ -74,4 +76,6 @@ def post_parse_request(
             client_id: Optional[str] = "",
             **kwargs
     ):
+        request = CCAccessTokenRequest(**request.to_dict())
+        logger.debug("%s: %s" % (request.__class__.__name__, sanitize(request)))
         return request

src/idpyoidc/server/oidc/add_on/pkce.py

@@ -7,6 +7,7 @@
 from idpyoidc.message.oauth2 import AuthorizationErrorResponse
 from idpyoidc.message.oauth2 import RefreshAccessTokenRequest
 from idpyoidc.message.oauth2 import TokenExchangeRequest
+from idpyoidc.message.oauth2 import CCAccessTokenRequest
 from idpyoidc.message.oidc import TokenErrorResponse
 from idpyoidc.server.endpoint import Endpoint
 
@@ -93,7 +94,7 @@ def post_token_parse(request, client_id, context, **kwargs):
     """
     if isinstance(
         request,
-        (AuthorizationErrorResponse, RefreshAccessTokenRequest, TokenExchangeRequest),
+        (AuthorizationErrorResponse, RefreshAccessTokenRequest, TokenExchangeRequest, CCAccessTokenRequest),
     ):
         return request