-
Notifications
You must be signed in to change notification settings - Fork 815
Fix non rotating refresh tokens #145
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix non rotating refresh tokens #145
Conversation
… the fields attribute is prohibited.
Adds indexes to the OAuth2 related models.
ModelFormMixin (base class of ApplicationUpdate) without the fields attribute is prohibited.
more flexible for related name of user field in AbstractApplication model
…t into davecap-revoke-keys
This breaks OAuthLib when `rotate_refresh_token()` returns `False`
…nt-refresh-tokens
@zuzelvp, While the refresh token is deleted here, isn't the same one immediately created right after here? OAuthLib is the library that determines the new refresh token. |
@conradev yes, I noticed after posting and deleted my previous comment ;) |
@conradev FYI I am cool with either solution (i.e., removing the line that changes request.refresh_token or restoring it later). Feel free to reuse the tests on your pull request. |
Related to #138