Hi team :wave: I have a question about fosite’s pr...
# general
s
Hi team 👋 I have a question about fosite’s provider NewAuthorizeRequest. Hopefully this is the right place to ask. If a client doesn’t have the grant type authorization code, it can still get an authorization code. Later on, when the client tries to exchange the auth code for an access token, it’ll get an error about the grant type. I would have expected it to fail before getting an auth code. I’m curious about why we don’t check that in NewAuthorizeRequest.