-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Refresh token should not be issued if client is not configured with refresh_token grant type#155 #168
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
…efresh_token grant type spring-projects#155
Hi, This issue seems to be a fault of mine not often working with GitHub. My pull request that solves #155 created this as a new issue. Sorry for this problem. This should be closed as a duplicate. However, I'm not sure. Is it enough to use the same name for the commit to the issue for this problem not to happen again? |
...auth2/server/authorization/authentication/OAuth2AuthorizationCodeAuthenticationProvider.java
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the PR @lspil !
Just so you are aware of the PR process, after you submit a PR it does create a new type of issue and therefore resulting in 2 issues - the original issue and the PR issue. This is the normal process. After we merge the PR, we will close it and label as a duplicate.
...auth2/server/authorization/authentication/OAuth2AuthorizationCodeAuthenticationProvider.java
Outdated
Show resolved
Hide resolved
...auth2/server/authorization/authentication/OAuth2AuthorizationCodeAuthenticationProvider.java
Outdated
Show resolved
Hide resolved
...a/org/springframework/security/oauth2/server/authorization/client/TestRegisteredClients.java
Outdated
Show resolved
Hide resolved
…efresh_token grant type#155
A refresh token was generated even if the client didn't have the refresh token grant type assigned.
The refresh token is now generated only for a client registered for the refresh token grant type.
Closes gh-155