Form- (not json-) encode auth-params when POSTing to authUrl

ably · Dec 3, 2015 · f3c6562 · paddybyers · Dec 3, 2015 · SimonWoolf
1 parent e2e8e5e
commit f3c6562
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/common/lib/client/auth.js b/common/lib/client/auth.js
@@ -262,7 +262,16 @@ var Auth = (function() {
 				};
 				Logger.logAction(Logger.LOG_MICRO, 'Auth.requestToken().tokenRequestCallback', 'Sending; ' + authOptions.authUrl + '; Params: ' + JSON.stringify(authParams));
 				if(authOptions.authMethod && authOptions.authMethod.toLowerCase() === 'post') {
-					Http.postUri(rest, authOptions.authUrl, authHeaders || {}, authParams, {}, authUrlRequestCallback);
+					var headers = authHeaders || {};
+					if(typeof(authParams) === 'object') {
+						/* send body form-encoded */
+						headers['content-type'] = "application/x-www-form-urlencoded";
+						body = Utils.toQueryString(authParams).slice(1); /* slice is to remove the initial '?' */
+					} else {
+						headers['content-type'] = "text/plain";
+						body = authParams;
+					}
+					Http.postUri(rest, authOptions.authUrl, headers, body, {}, authUrlRequestCallback);
 				} else {
 					Http.getUri(rest, authOptions.authUrl, authHeaders || {}, authParams, authUrlRequestCallback);
 				}