search

strongloop / loopback-component-oauth2

oAuth 2.0 server for LoopBack
http://www.strongloop.com
Other
62 stars 63 forks source link

Oauth Token never expires #11

Closed GeorgeZhai closed 9 years ago

GeorgeZhai commented 9 years ago

Hello in oauth2-lookback.js line 50 models.accessTokens.find(accessToken, function(err, token) { it only finds token, but TTL verification is not done here neither in the model.

And, Looks like Oauth Token will not be cleaned up after expiration. If user don't create another process to remove them, Potentially it could eat all the free space in DB during the time

Thanks, George

GeorgeZhai commented 9 years ago

Sorry, Looks like I was looking at an older version closing the issue first