Stack Apps is a question and answer site for apps, scripts, and development with the Stack Exchange API. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using the Stack Exchange v2.1 API. I'm using the explicit OAuth 2.0 flow, but it seems that the access token response step does not adhere to the RFC 6749 standard. Specifically, the Stack Exchange API documentation gives the response format as follows:

This request is responded to with either an error (HTTP status code 400) or an access token of the form access_token=...&expires=1234. expires will only be set if scope does not include no_expiry, the use of which is strongly advised against unless your app truly needs perpetual access.

However, the RFC 6749 standard, section-4.1.4, defines the access token response to be in JSON format.

This inconsistency makes many OAuth2 client libraries to fail. Could you guys look into this and fix it? Thanks.

share|improve this question
Confirmed that the API sends back just those two parameters, in URL-search format. However, I believe Stack Exchange operates under RFC-6750, which suggests, but does not require JSON. If true, that would make this a feature request, rather than a bug. – Brock Adams Jun 2 '13 at 12:08

You must log in to answer this question.

Browse other questions tagged .