Fix extracting of scope values from POST

Many inputs with same name are stored in a list.

2 files changed, 2 insertions, 2 deletions

diff --git a/docs/server2.rst b/docs/server2.rst
index 2baa81f..3b648e6 100644
--- a/docs/server2.rst
+++ b/docs/server2.rst
@@ -284,7 +284,7 @@ preview of a near future =)
             # In almost every case, you will want to include the current
             # user in these extra credentials in order to associate the user with
             # the authorization code or bearer token.
-            return request.POST['scopes'], {'user': request.user}
+            return request.POST.getlist['scopes'], {'user': request.user}
 
 
         @provider.access_token_view
diff --git a/examples/skeleton_oauth2_web_application_server.py b/examples/skeleton_oauth2_web_application_server.py
index feb1ed0..e847c4d 100644
--- a/examples/skeleton_oauth2_web_application_server.py
+++ b/examples/skeleton_oauth2_web_application_server.py
@@ -133,7 +133,7 @@ def authorize(request, scopes=None, client_id=None):
 def authorization_response(request):
     # Only return scopes the user actually authorized, i.e. the checked
     # scope checkboxes from the authorize view.
-    return request.POST['scopes'], {'user': request.user}
+    return request.POST.getlist(['scopes']), {'user': request.user}
 
 
 @provider.access_token_view