search

songkick / oauth2-provider

Simple OAuth 2.0 provider toolkit
MIT License
526 stars 146 forks source link

Expired_in and refresh_tokens not returned when using authorization code flow #15

Closed eliaslevy closed 12 years ago

eliaslevy commented 12 years ago

If you use an authorization code flow, you must exchange the code for an authorization token. But if you do this, you are told when the token expires and are not given a refresh token.

jcoglan commented 12 years ago

This library doesn't implement expires_in or refresh_token, mostly because we're not using those features and I'd like to see real use cases first, because I feel I don't understand their use fully enough from the spec.

What are you trying to use them for?

jcoglan commented 12 years ago

Closing due to inactivity. We're trying to get the to-do list sorted before releasing a gem.