Giters

spring-attic / spring-security-oauth

Support for adding OAuth1(a) and OAuth2 features (consumer and provider) for Spring web applications.

Home Page:http://github.com/spring-projects/spring-security-oauth

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Remove unnecessary ACCESS_TO_REFRESH tuple in RedisTokenStore

Mert-Z opened this issue · comments

commented

Tuples stored with ACCESS_TO_REFRESH key are never queried. Can it be removed or is it left intentionally for future use? If for future use, can it be documented via code comments?

If we remove its references, we can also get rid of the bug on L313 where ACCESS_TO_REFRESH is tried to be cleared by serializing with refresh token as key whereas it should be cleared by serializing related access token as key.