[dev] authorization_code is required with implicit grant type only

[miloszsobczak]

Hi,

On dev branch there is a bug with implicit flow which has been added recently. Actually when I create model with implicit value only into grants property I've got error: model.js

        return Promise.resolve({
            id: clientId,
            grants: ['implicit'],
            redirectUris: ['http://localhost:4400/']
        });
    }

given error:

Unhandled rejection unauthorized_client: Unauthorized client: `grant_type` is invalid
    at new UnauthorizedClientError (***\node_modules\oauth2-server\lib\errors\unauthorized-client-error.js:25:14)

which reflects those lines:

if (!_.includes(client.grants, 'authorization_code')) {
        throw new UnauthorizedClientError('Unauthorized client: `grant_type` is invalid');
      }

The problem is no longer visible when I push authorization_code into grants array.

Am I missing something? Imho implicit grant type should sufficent.

[mjsalinger]

Merged into dev. Will be included in v4.0.0.