Cannot use query parameters

[guyv]

If you pass in an authentication code via a query parameter, it will not be taken into account. The param function in the strategy class is too strict.

var param = function(name) {
var params = req.params || {};
var body = req.body || {};
var query = req.query || {};
if (null !== params[name] && params.hasOwnProperty(name)) return params[name];
if (null !== body[name]) return body[name];
if (null !== query[name]) return query[name];
return undefined;
};

If no body was sent, body[name] will be undefined: undefined !== null ==> undefined will be returned, and the query object will not be checked.