fetch_token should check the status_code of the response before parsing the result

[hhowe29]

This block of code should check the status_code of the response before parsing. If the server returns a 403, or any non 2xx code for that matter, then that error should propagate out to the caller. The current code just goes ahead and tries to parse the response text as json. On a 403, the response body is likely to be html

requests-oauthlib/requests_oauthlib/oauth2_session.py

Lines 341 to 366 in 46f886c

	r = self.request(
	method=method,
	url=token_url,
	timeout=timeout,
	headers=headers,
	auth=auth,
	verify=verify,
	proxies=proxies,
	cert=cert,
	**request_kwargs
	)
	log.debug("Request to fetch token completed with status %s.", r.status_code)
	log.debug("Request url was %s", r.request.url)
	log.debug("Request headers were %s", r.request.headers)
	log.debug("Request body was %s", r.request.body)
	log.debug("Response headers were %s and content %s.", r.headers, r.text)
	log.debug(
	"Invoking %d token response hooks.",
	len(self.compliance_hook["access_token_response"]),
	)
	for hook in self.compliance_hook["access_token_response"]:
	log.debug("Invoking hook %s.", hook)
	r = hook(r)
	self._client.parse_request_body_response(r.text, scope=self.scope)