Lemagicien

When request a token by client_credential grant lib call getUserFromClient function. As explained in the documentation here: [https://oauth2-server.readthedocs.io/en/latest/model/spec.html#getuserfromclient-client-callback](url) "This model function is required if the client_credentials grant is used." But...

When request an authorization code with invalid scope and state parameter, 'location' in response header does not contain '&state=xxxx' in the url. While for the others invalid cases (missing 'code_type'...

When I request an access token with 'password' grant and requireClientAuthentication to false. If 'grant_type' parameter is missing or invalid, I got the folowing error message: ``` { "error": "invalid_client",...