import urllib.parse import oauthlib.oauth2 class OAuth2Server(oauthlib.oauth2.Server): def verify_request(self, uri, *args, **kwargs): valid, request = super().verify_request(uri, *args, **kwargs) if valid: return valid, request # maybe the token was given in the querystring? query = urllib.parse.urlparse(request.uri).query token = None if query: parsed_qs = urllib.parse.parse_qs(query) token = parsed_qs.get("token", []) if len(token) > 0: token = token[0] if token: valid = self.request_validator.validate_bearer_token( token, request.scopes, request ) return valid, request