Disallow GET on token endpoint

- Adjusted the code.
Koppeltaal · Oct 13, 2023 · 87ce413 · 87ce413
1 parent f752f1e
commit 87ce413
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/oauth_server/views.py b/application/oauth_server/views.py
@@ -135,7 +135,7 @@ def validate_redirect_uri(smart_service):
         valid_redirects = list(map(lambda allowed_redirect: allowed_redirect.url, allowed_redirects))
         assert False, f"redirect_uri [{redirect_uri}] not allowed. Configured values: {valid_redirects}"
 
-    @blueprint.route('/oauth2/token', methods=['POST', 'GET'])
+    @blueprint.route('/oauth2/token', methods=['POST'])
     def handle_token_request():
         jwt = _do_client_assertion()
         if jwt: