evonove / django-oauth-toolkit / 832

93%

push

travis-ci

Revoke refresh tokens instead of deleting them

To handle the case where a refresh token is used to generate a new access
token but the new access/refresh token is never received, allow a refresh
token to be re-used within a grace period, returning the same access token
(appearing as if the request/response was 'cached').

This now revokes the token with a timestamp instead of deleting it.

Refs #497

28 of 28 new or added lines in 2 files covered. (100.0%)

1131 of 1208 relevant lines covered (93.63%)

4.68 hits per line