Subject: [OAUTH-WG] Repeating of client identifier?

From: Laurens Van Houtven <[email-masked]>
Date: Tue, 17 Aug 2010 21:53:11 +0200

Hi,

In the most recent draft version of the spec, section 2.1. Client Password
Credentials, the following example request is given:

POST /token HTTP/1.1
Host: server.example.com
Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW
Content-Type: application/x-www-form-urlencoded
grant_type=authorization_code&client_id=s6BhdRkqt3&code=i1WsRn1uB1&
redirect_uri=https%3A%2F%2Fclient%2Eexample%2Ecom%2Fcb

Why is the client_id both in the body and in the Authorization header?

thanks
lvh