About other grant types

[kuraga]

Good day! Thanks for this work!

This gem provides code Authorization Grant. What about other grants: implicit, password?

Some plans? Are patches welcome?

[isaacsanders]

Patches are welcome. I have been slacking lately. This is back on my radar.

All submissions welcome!

[Dantemss]

If anyone does implement the implicit flow, please keep this in mind:

http://technotes.iangreenleaf.com/posts/closing-a-nasty-security-hole-in-oauth.html

Automatically checking the client_id for the received token would be great.

[kuraga]

Found in my trash 😄
https://gist.github.com/kuraga/ecd703ffef2af0ebb96b

[Yanchek99]

+1 for password type

[mltsy]

The password flow can be implemented fairly easily as another strategy that inherits from this strategy by just overriding the request_phase method to display a form that gathers the username and password and submits to the callback url