songkick / oauth2-provider

Simple OAuth 2.0 provider toolkit

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Expired_in and refresh_tokens not returned when using authorization code flow

eliaslevy opened this issue · comments

If you use an authorization code flow, you must exchange the code for an authorization token. But if you do this, you are told when the token expires and are not given a refresh token.

This library doesn't implement expires_in or refresh_token, mostly because we're not using those features and I'd like to see real use cases first, because I feel I don't understand their use fully enough from the spec.

What are you trying to use them for?

Closing due to inactivity. We're trying to get the to-do list sorted before releasing a gem.