According to section 5.2 of rfc 6749
(https://tools.ietf.org/html/rfc6749#section-5.2)

A server should respond with 400 in case of an invalid grant. The
given grant is invalid and the client should give other data.

A 401 is not applicable here because the client is required to give
a suitable Authorization header field which doesn't make any sense if
you are trying to acquire a grant authentication.

According to sections 10.4.1 and 10.4.2 of rfc 2616
(https://tools.ietf.org/html/rfc2616#section-10.4.1)

it is useful when using pdb from commandline.

Authorization Code was missing this check, whereas Implicit was checking it.

A confusion between JWT as token and as authentication mechanism was introduced long-time back and I tried to make a bit of clarity to not confuse again the newcomers.

Clean doc

oauthlib#569: Implicit was not converting expires_in into integers

Add syntax check of get_default_redirect_uri

[DOCS] Added access_token as JWT examples, and updated JWT grant section

client_id is not passed to save_bearer_token

Add NCoC and Code of merit

See oauthlib#541

Change sentences for better SEO

Remove headers from request attributes

445 confirm redirect

Since we're used in enterprises where licensing matters, this may be useful when people evaluate our project.

While the previous documentation was not wrong in that non-formencoded data are not included in the signature for traditional OAuth1 service providers, the library does still include an `oauth_body_hash` for non-formencoded data. 

Update the documentation to include mention of the `oauth_body_hash` with a notice that validation of said parameter may not be supported by all service providers, but will nevertheless provide an additional integrity check for those that do support it.

Make scope optional for authorization code grant

Remove check on empty scopes for implicit grant flow

Fix oauthlib#431. The inherent function "raise_from_error" is called when "error=" is found in the payload. So it MUST raise something, and until now, only RFC errors were raised.

Attempt to fix 582 to improve coverage statistics

… fix-inline_docs_2

docstrings fix, try #2

Python 2.6 support was removed in
91152df.

Drop unittest2 dependency. All necessary testing features are included
in the stdlib unittest.

* `prepare_request_body` client_id is deprecated in favor of include_client_id
* a new unit test `test_prepare_request_body` is added to ensure conformity of several use cases
* the docstrings for the `body` param have been consolidated and standardized across multiple functions linked to `prepare_request_body` for clarity

Remove workarounds for unsupported Python 2.6

It is a more explicit assert with a more information message in case of
failure. For a full list of available assert methods, see:

https://docs.python.org/3/library/unittest.html#assert-methods

The type 'bytes' is available on all supported Pythons. Likewise the
byte literal b'...' is available on all supported Pythons. Use idiomatic
Python and remove workaround for an issue that no longer exists. Makes
the code more forward compatible with Python 3.

Prefer assertIsInstance(...) over assertTrue(isinstance(...))

Remove unnecessary workaround for bytes type

Merge c8a7cb1 mistakenly reverted a
line from aef9a3e.

integrated against requests_oauthlib idea

The nose project has ceased development. From their docs page:

https://nose.readthedocs.io/

> Note to Users
>
> Nose has been in maintenance mode for the past several years and will
> likely cease without a new person/team to take over maintainership.
> New projects should consider using Nose2, py.test, or just plain
> unittest/unittest2.

Simplify test infrastructure by using the stdlib unittest discover
command. One fewer dependency.

Remove unmaintained nose dependency from tests

(Cherry picked from f3ae98c)

Fix 431 by adding new CustomError exception

As spelled on https://pypi.org/.

Correct capitalization of PyPI

* added LegacyApplicationClient tests to ensure the grant supports a variety of allowed methods

… fix-585_client_id