René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"BoxApi20 can't obtain access_token ","articleBody":"According to BOX provider documentation `client_id` and `client_secret` parameters should be included in body of the request when obtaining an access token, but in current implementation they are encoded as base64 and included in Authorization header.\r\nhttps://developer.box.com/reference/post-oauth2-token/\r\n\r\nSolution is to override `getClientAuthentication` method in `BoxApi20` class and return `RequestBodyAuthenticationScheme.instance()` from it.\r\n\r\nAlso BoxApi20 doesn't sign requests correctly. It should be switched to use `BearerSignatureAuthorizationRequestHeaderField` signature instead of using `BearerSignatureURIQueryParameter`. I guess for this, we just need to remove overriden `getBearerSignature` method from BoxApi20`.\r\n\r\nLook at the example of API call\r\nhttps://developer.box.com/reference/get-metadata-templates-enterprise-securityClassification-6VMVochwUWo-schema/\r\n\r\n","author":{"url":"https://github.com/petrkopotev","@type":"Person","name":"petrkopotev"},"datePublished":"2022-08-04T10:07:34.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/1045/scribejava/issues/1045"}