RADAR-base / RADAR-Rest-Source-Auth

A simple application to support authorization of wearable devices using OAuth using a webservice with REST Endpoints.
https://radar-base.org/
Apache License 2.0
1 stars 0 forks source link

Lock refresh token #159

Closed blootsvoets closed 2 years ago

blootsvoets commented 2 years ago

Ensure that refresh tokens are not requested simultaneously. This is especially important because if an access token is requested twice with the same refresh token, the second call returns that the refresh token is no longer valid. This will invalidate the entire authorization.