OAuth2 ClientCredential grant custom expiration not being read from Flask configuration. about authlib HOT 5 CLOSED

Thanks for your report. I believe it is a typo, the grant_type should be client_credentials, not client_credential. I will fix it asap.

from authlib.

Fixed.

from authlib.

The current workaround is pretty simple: I simply set the pluralized config valueOAUTH2_EXPIRES_CLIENT_CREDENTIALS, which does get picked up and used for the expiration time of the client credential grant.

The issue, as described above, is that the currently specified default in the code base is not being used, and if you change the default bearer token expiration time then the default client credential grant expiration time will pick up the same value as a result.

from authlib.

If the grant type should be client_credentials, might I suggest also changing the documentation to reflect that the config variable name should be OAUTH2_EXPIRES_CLIENT_CREDENTIALS to match as well?

from authlib.

Thanks!

from authlib.