drf-social-oauth2 icon indicating copy to clipboard operation
drf-social-oauth2 copied to clipboard

Published 20 hours ago • verified publisher icon wagnerdelima

compatibility issue with django-oauth-toolkit==2.1.0

Open ehsan-g opened this issue 3 years ago • 3 comments

I am keep getting the "invalid client error" when I had django-oauth-toolkit==2.1.0 installed. I had to change it to django-oauth-toolkit==1.3.2

ehsan-g avatar Jul 26 '22 19:07 ehsan-g

what version of django and drf did you use?

babor99 avatar Aug 16 '22 09:08 babor99

I think I didn't change these - Django==3.2.14, djangorestframework==3.12.4

ehsan-g avatar Aug 16 '22 18:08 ehsan-g

I had some time to investigate this. Indeed, it does not work with django oauth toolkit equal or above 2.0.0. Reason is the new check_password(client_secret, request.client.client_secret) condition added in oauth2_providers/oauth2_validators, line 180. It is a bug on the password hasher.

wagnerdelima avatar Aug 28 '22 14:08 wagnerdelima

@ehsan-g how did u change the version of django-oauth-toolkit?

shrivardha avatar Oct 03 '22 16:10 shrivardha

@shrivardha Django==3.2.14 django-oauth-toolkit==1.3.2 djangorestframework==3.12.4 drf-social-oauth2==1.2.1 social-auth-app-django==5.0.0 social-auth-core==4.3.0`

ehsan-g avatar Oct 04 '22 17:10 ehsan-g