Quick question regarding the OAuth2 Spec, in particular section 5.1.5.
Reading that spec, it appears that the response needs to be formatted as JSON regardless of the format requested. Is that the standard or are other formats (i.e. XML) also supported? Thanks.