> I've learned that the documentation is incorrect in that it specifies
> the request as GET when it has to be POST.

> However, after switching to POST, I get an invalid_grant error when
> attempting to authenticate a user:

> My Request:
> grant_type=password&client_secret=(SECRET)&client_id=(PUBLIC)&username=(USE RNAME)&password=(PASSWORD)

> The Response:
> array(2) {
>   ["error_description"]=>
>   string(30) "Unallowed grant type: password"
>   ["error"]=>
>   string(13) "invalid_grant"

> }

> Since the documentation specifically tells me grant_type should be set
> to 'password', I'm pretty stuck on this.

> Anyone have any experience with authenticating a user with
> access_token requests?

> Ed

> Ahh...didn't notice this part:

> Certain applications may not have full access to a standard web-style
> authorization flow. This is ideal for desktop and mobile applications.
> Given this, we also support authorization by requesting the client's
> username and password. This type of flow is restricted to approved
> applications only, so you must request access first.

> Requires approval first.

> On Dec 21, 11:33 am, Ed Burns <ed.blogres...@gmail.com> wrote:
> > Trying to authenticate a user viahttps://
> disqus.com/api/oauth/2.0/access_token/

> > I've learned that the documentation is incorrect in that it specifies
> > the request as GET when it has to be POST.

> > However, after switching to POST, I get an invalid_grant error when
> > attempting to authenticate a user:

> > My Request:

> grant_type=password&client_secret=(SECRET)&client_id=(PUBLIC)&username=(USE
> RNAME)&password=(PASSWORD)

> > The Response:
> > array(2) {
> >   ["error_description"]=>
> >   string(30) "Unallowed grant type: password"
> >   ["error"]=>
> >   string(13) "invalid_grant"

> > }

> > Since the documentation specifically tells me grant_type should be set
> > to 'password', I'm pretty stuck on this.

> > Anyone have any experience with authenticating a user with
> > access_token requests?

> > Ed

> How can I require the approval?

> Il giorno mercoledì 21 dicembre 2011 19:41:00 UTC+1, Ed Burns ha scritto:
> > Ahh...didn't notice this part:  

> > Certain applications may not have full access to a standard web-style  
> > authorization flow. This is ideal for desktop and mobile applications.  
> > Given this, we also support authorization by requesting the client's  
> > username and password. This type of flow is restricted to approved  
> > applications only, so you must request access first.  

> > Requires approval first.  

> > On Dec 21, 11:33 am, Ed Burns <ed.blogres...@gmail.com> wrote:  
> > > Trying to authenticate a user viahttps://disqus.com/api/oauth/2.0/access_token/ (http://disqus.com/api/oauth/2.0/access_token/)  

> > > I've learned that the documentation is incorrect in that it specifies  
> > > the request as GET when it has to be POST.  

> > > However, after switching to POST, I get an invalid_grant error when  
> > > attempting to authenticate a user:  

> > > My Request:  
> > > grant_type=password&client_secret=(SECRET)&client_id=(PUBLIC)&username=(USE RNAME)&password=(PASSWORD)  

> > > The Response:  
> > > array(2) {  
> > >   ["error_description"]=>  
> > >   string(30) "Unallowed grant type: password"  
> > >   ["error"]=>  
> > >   string(13) "invalid_grant"  

> > > }  

> > > Since the documentation specifically tells me grant_type should be set  
> > > to 'password', I'm pretty stuck on this.  

> > > Anyone have any experience with authenticating a user with  
> > > access_token requests?  

> > > Ed  

> --  
> --
> http://groups.google.com/group/disqus-dev?hl=en