158
I'm trying to implement the Resource Owner & Password Credentials flow from the OAuth 2 spec. I'm having trouble understanding the token_type value that gets sent back with a valid response. In the spec all the examples show "token_type":"example" but says it should be
token_type REQUIRED. The type of the token issued as described in Section 7.1. Value is case insensitive.
Can someone please explain this to me?