Changed the code to NOT store full tokens in the data store (memory)

FrankHassanabad / Oauth2orizeRecipes

OAuth2 security recipes and examples based on OAuth2orize

MIT License

375 stars 97 forks source link

Closed FrankHassanabad closed 7 years ago

FrankHassanabad commented 7 years ago

This is good security practice since a breach of the DB will not lead to tokens being stolen
This is good security practice because admins of the DB do not have access to sensitive information
Reworked the unit tests to be more standard
Added removeAll to the different DB token types
Covered all the DB code now with tests

FrankHassanabad commented 7 years ago

Bump the major version number since this is a potentially breaking change for people using it.