spring-attic / spring-security-oauth

Support for adding OAuth1(a) and OAuth2 features (consumer and provider) for Spring web applications.
http://github.com/spring-projects/spring-security-oauth
Apache License 2.0
4.69k stars 4.04k forks source link

Correctly handle when expires_in=0 #1172

Closed alatushkin closed 4 years ago

alatushkin commented 7 years ago

Some services ( vk.com "vkontakte" for example) responds with "expires_in:0" when requesting access_token witch will never expire (scope "offline" for vk ) In this case module produce OAuth2AccessToken instance with isExpired() instantly "true"

jgrandja commented 4 years ago

@alatushkin Please see comment