Deviantart invalid_requst on oAUTH

[rexon113]

I've been trying to download from Deviantart for a while now with no success. The guide which I've been following is the one here. I tried the following:

1. Set up an app on Deviantart
2. Clear cache of gallery-dl multiple times
3. Enter client-id and secret in the config
4. Do oauth with gallery-dl deviantart
5. Response:

Remote server reported an error:

{'error': 'invalid_request', 'error_description': 'The response_type MUST be token.', 'state': 'gallery-dl_deviantart_HVbMcHgl'}

When I remove the client id and secret, the oauth works. But then downloading doesn't work obviously as I get a useless public download key which ratelimits immediatelly. So the problem seems to be somewhere with the id and secret. I've also been a bit confused if you're supposed to write them with apostrophes in the config.

My app looks like the following, I've entered the redirect URL

The corresponding snipped from my config

 "deviantart":
        {
            "client-id":"something",
            "client-secret":"something else",
            "refresh-token": null,
            "auto-watch": false,
            "auto-unwatch": false,
            "comments": false,
            "extra": false,
            "flat": true,
            "folders": false,
            "group": true,
            "include": "gallery",
            "journals": "html",
            "jwt": false,
            "mature": true,
            "metadata": false,
            "original": true,
            "pagination": "api",
            "public": true,
            "quality": 100,
            "wait-min": 0
        },

If it matters, my header config which is applied to all extractors, almost the default config:

 "base-directory": "F:/Scraped Content/",
        "postprocessors": null,
		"archive": "F:/Scraped Content/Archive/",
        "cookies-update": true,
        "proxy": null,
        "skip": true,
        "cookies": ["firefox"],
        "user-agent": "some user agent",
        "retries": 4,
        "timeout": 30.0,
        "verify": true,
        "fallback": true,

        "sleep": 0,
        "sleep-request": 0,
        "sleep-extractor": 0,

        "path-restrict": "auto",
        "path-replace": "_",
        "path-remove": "\\u0000-\\u001f\\u007f",
        "path-strip": "auto",
        "path-extended": true,

        "extension-map": {
            "jpeg": "jpg",
            "jpe" : "jpg",
            "jfif": "jpg",
            "jif" : "jpg",
            "jfi" : "jpg"
        },

[julianw1010]

The issue is that I've been choosing "Implicit" instead of "Authorization code". One might wanna update that in the wiki

[mikf]

One might wanna update that in the wiki

Sure, why not, but the instructions don't mention anything regarding "OAuth2 Grant Type",
so why would anyone change it to something other than the default "Authorization Code"?

[julianw1010]

That is fair. I'm just always a bit anxious when it comes to oauth, you don't consider one small detail and it doesn't work at all. Implicit seemed more "plausible" to me, after reading the description. Apparently, I was wrong. What to learn? Keep the defaults if no one told you to change them. Yes, even if it's Oauth with 10 different settings.