Home

Site-Specific Peculiarities

Most frequently you'll need to set oauth2.authConfig.secretInBody = true (or use secret_in_body in your settings dict) because the server expects the client secret in the request body, not the Authorization header. This goes for Instagram, Pinterest, Medium, Strava and others.

Also check out these:

• Azure
• BitBucket
• Facebook
• GitHub
• Google
• Instagram, Bitly, Pinterest, ... (“No token type received”)
• LinkedIn
• Reddit
• Uber