Closed oswynb closed 9 years ago
It makes sense to me that we have a throwInvalidScope helper here too. Other than that LGTM, so merge with or without the change.
This is a little ugly now, @thsutton had an idea to split this up a little. I don't see why checkClientAuthCode should return a (return ()). That's pretty bizarre and spaghetti-like in terms of control flow.
That said, the behaviour is improved and thus merge.
Completed a TODO and made code surrounding it more concise. Fixed a few minor typos/grammar/layout things.