How to implement Oauth2 without sending client_secret in WSO2 APIM
问题 I want to get access token without submiting Base64(client_id:client_secret) in the request. I just want to submit the client_id and username and password (Password Grant Type) : public passoword grant type It's called public scheme by IBM. Please quiclky skim through this likn. What I like is to never send the client_secret in an access token request. The image below illustrate it (still IBM). The problem is that WSO2 APIM requests to obtain access token ALWAYS include the Base64(client_id