scc-digitalhub / AAC

Apache License 2.0
4 stars 6 forks source link

difficulty in easily determining whether a released refresh_token has expired #605

Open gianpaolo-tndigit opened 1 month ago

gianpaolo-tndigit commented 1 month ago

The oauth_refresh_token table contains a serialized version of the DefaultExpiringOAuth2RefreshTokenclass, which complicates verification by external tools, such as the database, when attempting to retrieve the token and determine if it has expired. Including an expiration_date field in the table oauth_refresh_token would be helpful to make this process easier.