{"push_id":1071430459,"size":1,"distinct_size":1,"ref":"refs/heads/develop","head":"9e9848fd6286d11d8ff5cd8fd9f62a0276848c73","before":"f3ecb0b39acc89e10024d6ce59899edb72e2aa07","commits":[{"sha":"9e9848fd6286d11d8ff5cd8fd9f62a0276848c73","author":{"email":"58c6b632dab97f0657694af14d73f407f2aa4afb@gmail.com","name":"magnusjjj"},"message":"Fix oauth payload method (#2915)\n\nThe new patch had a bug in it, where the variable name was mistyped.\r\nThis time, i have tested it with:\r\n\r\nOauth via header to my own django server (works!)\r\nOauth via payload to gitlab (works!)\r\nOauth via header to gitlab (works!)\r\n\r\nWe *should* also add some sort of note in the gui about what the setting means, since the authorization-bearer header is the RFC specified method, but the setting probably should default to payload for legacy reasons :). Does any other oauth provider use the access_token method? Then again, we probably won't know if its safe, unless you collect target oauth server statistics ;).","distinct":true,"url":"https://api.github.com/repos/RocketChat/Rocket.Chat/commits/9e9848fd6286d11d8ff5cd8fd9f62a0276848c73"}]}