ShareFile OAuth Password Grant Type
==================================

Configuration:
==============
Subdomain: cazarin
Client ID: CwOHHD06vOwW4QlxPEYH4GULOhgoZLAw
Client Secret: l1ua****Zjjk
Username: david@cazarin.com
Password: *******************

Token Request Details:
=====================
URL: https://cazarin.sharefile.com/oauth/token
Method: POST
Content-Type: application/x-www-form-urlencoded

Request Body:
grant_type=password&username=david%40cazarin.com&password=if3w+ynzy+pfgx+i4dg&client_id=CwOHHD06vOwW4QlxPEYH4GULOhgoZLAw&client_secret=l1ua69h2mLoVmzgasRxq8H0F7SPXJedDYAqifLPFbLJkZjjk

Response:
=========
HTTP Code: 400

Verbose cURL Output:
===================
* processing: https://cazarin.sharefile.com/oauth/token
*   Trying 13.248.193.251:443...
* Connected to cazarin.sharefile.com (13.248.193.251) port 443
* ALPN: offers h2,http/1.1
*  CAfile: /etc/pki/tls/certs/ca-bundle.crt
*  CApath: none
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=*.sharefile.com
*  start date: Oct  5 00:00:00 2025 GMT
*  expire date: Nov  3 23:59:59 2026 GMT
*  subjectAltName: host "cazarin.sharefile.com" matched cert's "*.sharefile.com"
*  issuer: C=US; O=Amazon; CN=Amazon RSA 2048 M01
*  SSL certificate verify ok.
* using HTTP/2
* h2 [:method: POST]
* h2 [:scheme: https]
* h2 [:authority: cazarin.sharefile.com]
* h2 [:path: /oauth/token]
* h2 [content-type: application/x-www-form-urlencoded]
* h2 [accept: application/json]
* h2 [content-length: 183]
* Using Stream ID: 1
> POST /oauth/token HTTP/2
Host: cazarin.sharefile.com
Content-Type: application/x-www-form-urlencoded
Accept: application/json
Content-Length: 183

< HTTP/2 400 
< date: Wed, 29 Jul 2026 22:29:52 GMT
< content-type: application/json;charset=UTF-8
< content-length: 76
< set-cookie: AWSALBTG=l3H1OdkReRlO5iSAJ9jFJkN6srU5EFnw5M2jfCXgZSS/ufdz7pnHyqASPHys7R3fwHngnp0dnGIzQFInt106YiuXvWXEYcGnphu0OKYzQ3MRlD1F0zcnxwUFcpsltm3o652Z9m0ebCFreMGXIWdW6Z6DN0dkJWvRgfrEXqFhVIDe; Expires=Wed, 05 Aug 2026 22:29:51 GMT; Path=/
< set-cookie: AWSALBTGCORS=l3H1OdkReRlO5iSAJ9jFJkN6srU5EFnw5M2jfCXgZSS/ufdz7pnHyqASPHys7R3fwHngnp0dnGIzQFInt106YiuXvWXEYcGnphu0OKYzQ3MRlD1F0zcnxwUFcpsltm3o652Z9m0ebCFreMGXIWdW6Z6DN0dkJWvRgfrEXqFhVIDe; Expires=Wed, 05 Aug 2026 22:29:51 GMT; Path=/; SameSite=None; Secure
< set-cookie: AWSALB=zAiZESaoZqf+WRS3aldnRrJhyDetKD7Z2p+pFy06bvOgJ9dKw7Oe3KFrojwB2KbTKDsmCYxLRTupZvinDklo2uezs6eZGSLeldKBU5JlP1AOEwFOmHEit8Ngd6kG; Expires=Wed, 05 Aug 2026 22:29:51 GMT; Path=/
< set-cookie: AWSALBCORS=zAiZESaoZqf+WRS3aldnRrJhyDetKD7Z2p+pFy06bvOgJ9dKw7Oe3KFrojwB2KbTKDsmCYxLRTupZvinDklo2uezs6eZGSLeldKBU5JlP1AOEwFOmHEit8Ngd6kG; Expires=Wed, 05 Aug 2026 22:29:51 GMT; Path=/; SameSite=None; Secure
< cache-control: no-store, no-cache
< expires: Tue, 28 Jul 2026 22:29:51 GMT
< citrix-transactionid: 54107428-2fc3-4337-a300-a882fe7ccdf5
< correlationid: MIJx_RIGfE6pwUZoTyO69w
< x-content-type-options: nosniff
< x-xss-protection: 1; mode=block
< x-frame-options: DENY
< x-robots-tag: noindex
< x-sfapi-requestid: sB3DQLphLEizCDOTeQoLWg
< 
* Connection #0 to host cazarin.sharefile.com left intact

Response Body:
==============
{"error":"invalid_grant","error_description":"invalid username or password"}

❌ FAILED: Could not obtain token
Error: invalid_grant
Description: invalid username or password

Troubleshooting Tips:
===================
1. Verify your API application supports 'password' grant type
2. Check username format (try with/without domain)
3. Ensure app-specific password is used if 2FA is enabled
4. Verify client_id and client_secret are correct
5. Check if your API app has the required scopes

Next Steps:
===========
If this works, we can update the SimpleShareFileAPI.php to use this URL structure.
If it fails, we may need to use the Authorization Code flow instead.