{"action":"created","issue":{"url":"https://api.github.com/repos/lucadegasperi/oauth2-server-laravel/issues/206","labels_url":"https://api.github.com/repos/lucadegasperi/oauth2-server-laravel/issues/206/labels{/name}","comments_url":"https://api.github.com/repos/lucadegasperi/oauth2-server-laravel/issues/206/comments","events_url":"https://api.github.com/repos/lucadegasperi/oauth2-server-laravel/issues/206/events","html_url":"https://github.com/lucadegasperi/oauth2-server-laravel/issues/206","id":46320678,"number":206,"title":"Unable to check access_token parameter when in production mode.","user":{"login":"jestillore","id":3094154,"avatar_url":"https://avatars.githubusercontent.com/u/3094154?v=3","gravatar_id":"","url":"https://api.github.com/users/jestillore","html_url":"https://github.com/jestillore","followers_url":"https://api.github.com/users/jestillore/followers","following_url":"https://api.github.com/users/jestillore/following{/other_user}","gists_url":"https://api.github.com/users/jestillore/gists{/gist_id}","starred_url":"https://api.github.com/users/jestillore/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jestillore/subscriptions","organizations_url":"https://api.github.com/users/jestillore/orgs","repos_url":"https://api.github.com/users/jestillore/repos","events_url":"https://api.github.com/users/jestillore/events{/privacy}","received_events_url":"https://api.github.com/users/jestillore/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/lucadegasperi/oauth2-server-laravel/labels/bug","name":"bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":21,"created_at":"2014-10-20T20:20:32Z","updated_at":"2015-12-02T12:01:53Z","closed_at":"2014-10-22T09:19:32Z","body":"Hello,\r\nI have setup my local environment with with this package installed. I have set the ```'http_headers_only' => false``` and checked whether the Authorization Header or the Query string works, and I confirmed it working. However, when I uploaded my work in the production server. It always returns this message ``{\r\n    \"error\": \"invalid_request\",\r\n    \"error_description\": \"The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed. Check the \\\"access token\\\" parameter.\"\r\n}`` even though I have passed the access token through the Authorization Header.\r\nI checked using query string and I noticed it was working fine. So I tried changing the ```http_headers_only``` to ```true``` so I can make sure he's only checking through the headers. Suddenly, it return same message. Even though I have the right access token. I even had requested for a new one but I got same return."},"comment":{"url":"https://api.github.com/repos/lucadegasperi/oauth2-server-laravel/issues/comments/161272113","html_url":"https://github.com/lucadegasperi/oauth2-server-laravel/issues/206#issuecomment-161272113","issue_url":"https://api.github.com/repos/lucadegasperi/oauth2-server-laravel/issues/206","id":161272113,"user":{"login":"lisiu","id":5699030,"avatar_url":"https://avatars.githubusercontent.com/u/5699030?v=3","gravatar_id":"","url":"https://api.github.com/users/lisiu","html_url":"https://github.com/lisiu","followers_url":"https://api.github.com/users/lisiu/followers","following_url":"https://api.github.com/users/lisiu/following{/other_user}","gists_url":"https://api.github.com/users/lisiu/gists{/gist_id}","starred_url":"https://api.github.com/users/lisiu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lisiu/subscriptions","organizations_url":"https://api.github.com/users/lisiu/orgs","repos_url":"https://api.github.com/users/lisiu/repos","events_url":"https://api.github.com/users/lisiu/events{/privacy}","received_events_url":"https://api.github.com/users/lisiu/received_events","type":"User","site_admin":false},"created_at":"2015-12-02T12:01:53Z","updated_at":"2015-12-02T12:01:53Z","body":"you can put `Request::header()` anywhere in your application, \r\nmaybe you can log that in the controller action (althought you should probably disable the oauth2 filter/middleware first)\r\n\r\nthe point is to check what your other app is sending to lumen, what kind of headers, then you will know what to do next\r\n\r\nas I wrote previously, you can also try to send authorization token in the query string instead of the Authorization header (for testing purposes)\r\n"}}