I'm using the Stack Exchange v2.1 API. I'm using the explicit OAuth 2.0 flow, but it seems that the access token response step does not adhere to the RFC 6749 standard. Specifically, the Stack Exchange API documentation gives the response format as follows:
This request is responded to with either an error (HTTP status code 400) or an access token of the form access_token=...&expires=1234. expires will only be set if scope does not include no_expiry, the use of which is strongly advised against unless your app truly needs perpetual access.
However, the RFC 6749 standard, section-4.1.4, defines the access token response to be in JSON format.
This inconsistency makes many OAuth2 client libraries to fail. Could you guys look into this and fix it?