title: OAuth2 Resource Owner Password Credentials flow
body: <p>Does the OAuth2 Resource Owner Password Credentials flow only need the following informations for authentication:</p>
  
  <pre><code> grant_type: password
   username: test@test.de
   password: test
  </code></pre>
  
  <p>Or does it need also the <code>client_id</code> and <code>client_secret</code>? I ask, because I want to use <a href="https://github.com/simplabs/ember-simple-auth" rel="nofollow noreferrer">Ember-Simple-Auth</a> together with <a href="https://github.com/applicake/doorkeeper" rel="nofollow noreferrer">Doorkeeper</a>. Both implement the flow, but Ember-Simple-Auth didn't use <code>client_id</code> and <code>client_secret</code>, whereas Doorkeeper needs that information to work. So I think one of these doesn't implement the OAuth2 specs correctly.</p>
  
  <p><strong>Edit 1:</strong></p>
  
  <ul>
  <li><a href="https://github.com/applicake/doorkeeper/wiki/Supported-Features" rel="nofollow noreferrer">Doorkeeper features</a></li>
  <li><a href="https://github.com/simplabs/ember-simple-auth#embersimpleauth" rel="nofollow noreferrer">Ember-Simple-Auth features</a></li>
  </ul>
  
  <p>I also have looked at the specs before, but I want to be sure, before I fill a bug report for Doorkeeper gem, but there is also this section in the specs:</p>
  
  <blockquote>
    <p>If the client type is confidential or the client was issued client credentials (or assigned other authentication requirements), the client MUST authenticate with the authorization server as described in Section 3.2.1.</p>
  </blockquote>
  
  <p><strong>Edit 2</strong></p>
  
  <p>While looking into the tests of ember-simple-auth, I saw that it also tests for request parameters <code>client_id</code> and <code>client_secret</code>. Therefor I looked deeper into the code and found out how to setup id and secret.</p>
  
  <pre><code>App.LoginController = Ember.Controller.extend(Ember.SimpleAuth.LoginControllerMixin, {
      client_id: 'id',
      client_secret: 'secret'
  })
  </code></pre>
  
  <p><strong>Edit 3</strong></p>
  
  <p>Since a big refactoring in Ember-SimpleAuth, the solution shown in Edit 2 doesn't work anymore. But Doorkeeper also changes and now <code>client_id</code> and <code>client_secret</code> are optional.</p>