Tomasz Kędziora created CXF-5530:
------------------------------------

             Summary: Wrong error code for non existing client's
                 Key: CXF-5530
                 URL: https://issues.apache.org/jira/browse/CXF-5530
             Project: CXF
          Issue Type: Bug
          Components: JAX-RS Security
    Affects Versions: 2.7.8, 3.0.0-milestone1
            Reporter: Tomasz Kędziora


Currently when I use non existing client_id on call I get response:

Response Code: 400
{code}
{
  "error": "invalid_request",
  "error_description": "Client ID is invalid",
  "error_uri": null
}
{code}

But by RFC it should be returned error=*invalid_client*
http://tools.ietf.org/html/rfc6749#section-5.2

Error is generated in that method:
org.apache.cxf.rs.security.oauth2.services.AccessTokenService.getClient(String)



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to