Use client_secret for code exchange in Auth Code Flow

NoBrainSkull · NoBrainSkull · commit 736a765eed7b · 2018-12-13T16:09:07.000+01:00
diff --git a/src/ResponseValidator.js b/src/ResponseValidator.js
@@ -237,11 +237,12 @@ export class ResponseValidator {
     _processCode(state, response) {
         var request = {
             client_id: state.client_id,
+            client_secret: this._settings.client_secret,
             code : response.code,
             redirect_uri: state.redirect_uri,
             code_verifier: state.code_verifier,
         };
-
+        
         return this._tokenClient.exchangeCode(request).then(tokenResponse => {
             
             for(var key in tokenResponse) {
