ory / fosite / 1252

86%

master: 71%

Pull #332

travis-ci

oauth2: Improve refresh security and reliability

This patch resolves several issues regarding the refresh flow. First,
an issue has been resolved which caused the audience to not be
set in the refreshed access tokens.

Second, scope and audience are validated against the client's
whitelisted values and if the values are no longer allowed,
the grant is canceled.

Closes #331
Closes #325
Closes #324

20 of 20 new or added lines in 3 files covered. (100.0%)

2831 of 3311 relevant lines covered (85.5%)

106.5 hits per line