aliev / aioauth

Asynchronous OAuth 2.0 provider for Python 3
https://aliev.me/aioauth
MIT License
214 stars 19 forks source link

fix: return correct `toke_type` in introspection #87

Closed benreinhold-nm closed 1 year ago

benreinhold-nm commented 1 year ago

The introspection response currently returns as token_type the value of the token_type_hint parameter (defaulted to "refresh_token"). However, RFC7662, Section 2.2 prescribes this to be the same kind of token_type as in the responses from the token endpoint (which is "Bearer" by default), which is the one stored as part of the token's TToken instance.