Minimal refresh token support

vapor-community / Imperial

Federated Authentication with OAuth providers

MIT License

153 stars 48 forks source link

Minimal refresh token support #54

Closed microtherion closed 4 years ago

microtherion commented 4 years ago

Some OAuth providers use limited lifespan access tokens, along with long/indefinitely lived refresh tokens.

This PR implements the shared infrastructure needed for minimal refresh token support (Just storing the refresh token in the session). Currently my client implements the rest of the refreshing; I intend to eventually propose a PR to move that functionality to Imperial as well.

microtherion commented 4 years ago

@calebkleveter I'm now distinguishing the two cases and giving a more accurate error.