Avoid response where 'expiresIn' could be negative

nulab / scala-oauth2-provider

OAuth 2.0 server-side implementation written in Scala

MIT License

537 stars 97 forks source link

Avoid response where 'expiresIn' could be negative #107

Closed nremond closed 8 years ago

nremond commented 8 years ago

Hello,

In the current process, it is first checked that a token.isExpired and then, the token.expiresIn is recalculated with a new time. As such, it is possible to have a negative value.

nremond commented 8 years ago

Agreed. I've updated my code.