Proxy.php Double encryption

esbenp / lumen-api-oauth

The code for a blog post I wrote about creating web apps using a Lumen API that is authenticated by OAuth2

http://esbenp.github.io/2015/05/26/lumen-web-api-oauth-2-authentication/

61 stars 22 forks source link

Proxy.php Double encryption #10

Closed amilajack closed 9 years ago

amilajack commented 9 years ago

I believe that in the Proxy.php file on line 54 your are encrypting an already encrypted refresh token. And when using the refresh_token grant you are decrypting it only once.

esbenp commented 9 years ago

You are right! :-) fixed it