Merge pull request #407 from smarie/fix_issue_404

Have `OAuth2Session` correctly use the `self.verify` value if `verify` is not   overridden in `fetch_token` and `refresh_token`.

Author: JonathanHuot

AUTHORS.rst

@@ -22,4 +22,5 @@ Patches and Suggestions
 - Vinay Raikar <rockraikar@gmail.com>
 - kracekumar <me@kracekumar.com>
 - David Baumgold <david@davidbaumgold.com>
+- Sylvain Marie <sylvain.marie@se.com>
 - Craig Anderson <craiga@craiga.id.au>

HISTORY.rst

@@ -1,10 +1,17 @@
 History
 -------
 
+v1.3.2 (TBD)
+++++++++++++++++++++++++
+- ``OAuth2Session`` now correctly uses the ``self.verify`` value if ``verify``
+  is not overridden in ``fetch_token`` and ``refresh_token``. Fixes `#404
+  <https://github.com/requests/requests-oauthlib/issues/404>`_.
+
 v1.3.1 (21 January 2022)
 ++++++++++++++++++++++++
 
 - Add initial support for OAuth Mutual TLS (draft-ietf-oauth-mtls)
+- Removed outdated LinkedIn Compliance Fixes
 - Add eBay compliance fix
 - Add Spotify OAuth 2 Tutorial
 - Add support for python 3.8, 3.9

requests_oauthlib/oauth2_session.py

@@ -185,7 +185,7 @@ def fetch_token(
         force_querystring=False,
         timeout=None,
         headers=None,
-        verify=True,
+        verify=None,
         proxies=None,
         include_client_id=None,
         client_secret=None,
@@ -388,7 +388,7 @@ def refresh_token(
         auth=None,
         timeout=None,
         headers=None,
-        verify=True,
+        verify=None,
         proxies=None,
         **kwargs
     ):