Replies: 1 comment
-
@aeneasr I think this change came from one of your PRs? Perhaps you can shed some light for the users of fosite? Thanks! |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Starting in fosite v0.49.0, during a refresh grant for a token endpoint, the new
RotateRefreshToken
storage interface function must also revoke the access token to maintain correct behavior. Why does a function calledRotateRefreshToken
have anything to do with revoking an old access token, where there is already another storage interface for revoking an access token? In other words, why doesn'tPopulateTokenEndpointResponse
inflow_refresh.go
callRevokeAccessToken
anymore? Is this conflating refresh and access token storage interfaces?Beta Was this translation helpful? Give feedback.
All reactions