Do not serialize OAuth2AccessToken and OAuth2RefreshToken into byte[]

[activey]

Just tried it locally, works pretty well when exposed in original structure and not serialized into byte[] for both of them, makes an option to take a look into Mongo and see how are tokens values, just a suggestion but would be awesome to see tokens in text rather in byte arrays ;)

[caelcs]

Yes you are right about it. Better way to debug it and inspect.

On Thu, 25 Apr 2019 at 21:03, Łukasz Grabski ***@***.***> wrote: Just tried it locally, works pretty well when exposed in original structure and not serialized into byte[] for both of them, makes an option to take a look into Mongo and see how are tokens values, just a suggestion but would be awesome to see tokens in text rather in byte arrays ;) — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#16>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAGGB3P4Z4FAIEBTPSGGA4LPSIE73ANCNFSM4HIQHZOA> .

-- Sent from my iPhone

[activey]

👍

[caelcs]

Can you tell me where you see that serialisation? I wonder if you are not talking about the pass enconder....

[activey]

Sure, in

spring-security-mongo/src/main/java/uk/co/caeldev/springsecuritymongo/MongoTokenStore.java

Line 82 in 540e8a2

serializeAccessToken(token),

there is serializeAccessToken method called, I believe you dont need to do it or maybe introduce some serialization strategy? I can create a merge request with my suggestion if you wish ;)