lepture / flask-oauthlib / 432

84%

push

travis-ci

Allow having access tokens without expiration date (#311)

It should be possible to have valid access tokens that doesn't have an
expiration date set. The OAuth RFC recommends having it, but it's not a
requirement. We therefore should only validate expiration date on bearer
token if it's set.

Ref:
https://tools.ietf.org/html/rfc6749#section-4.2.2
https://tools.ietf.org/html/rfc6749#section-5.1

1 of 1 new or added line in 1 file covered. (100.0%)

1149 of 1362 relevant lines covered (84.36%)

3.37 hits per line