Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

oauth2: Resolves several issues related to revokation #281

Merged
merged 3 commits into from May 28, 2018

Conversation

aeneasr
Copy link
Member

@aeneasr aeneasr commented May 28, 2018

No description provided.

arekkas and others added 3 commits May 25, 2018 12:00
This patch resolves several issues related to token revokation as well as duplicate authorize code usage:

* oauth2: Revoking access or refresh tokens should revoke past and future tokens too
* oauth2: Revoke access and refresh tokens when authorize code is used twice

Additionally, this patch resolves an issue where refreshing a token would not revoke previous tokens.

Closes #278
Closes #280
@coveralls
Copy link

Coverage Status

Coverage decreased (-0.4%) to 84.959% when pulling c4898eb on revoke-tokens-2nd into 2d58a58 on master.

@aeneasr aeneasr merged commit 72bff7f into master May 28, 2018
@aeneasr aeneasr deleted the revoke-tokens-2nd branch May 28, 2018 19:27
budougumi0617 added a commit to budougumi0617/fosite that referenced this pull request May 10, 2019
This patch resolves several issues related to token revokation as well as duplicate authorize code usage:

* oauth2: Revoking access or refresh tokens should revoke past and future tokens too
* oauth2: Revoke access and refresh tokens when authorize code is used twice

Additionally, this patch resolves an issue where refreshing a token would not revoke previous tokens.

Closes ory#278
Closes ory#280
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants