OAuth client sends client_id in token body under client_secret_basic (strict servers reject as multiple auth methods)

OAuth client sends client_id in token body under client_secret_basic (strict servers reject as multiple auth methods) #423