mbuczko / cerber-oauth2-provider

Clojure implementation of RFC 6749 OAuth 2.0 authorization framework (OAuth2 provider)
Apache License 2.0
58 stars 11 forks source link

It issues access token and refresh token when I request token by password grant_type, but I found that there was only refresh token in database. #13

Closed jaredchendr closed 6 years ago

jaredchendr commented 6 years ago

It issues access token and refresh token when I request token by password grant_type. But it get Invalid token error message when I use access token to visit api. I found that there is only refresh token in database. Should an access token be generated an stored in database.

jaredchendr commented 6 years ago

I recommend that putting access_token an refresh_token on the same row on table of database, and make sure that access_token and refresh_token can be operate as atom.

mbuczko commented 6 years ago

thanks for a fix.