Missing expires_in causes access token to always appear expired about oauth2 HOT 5 CLOSED

I was thinking about this, GitHub for example does not issue expires_in. Best way would probably be to test if the token still works, which would require a URL. Could be a setting like token_test_url or something.

(BTW I changed this log entry just recently to be more informative)

from oauth2.

yes Instagram Oauth2 implementation also does not send expires_in :
"Even though the access token does not specify an expiration time, your app should handle the case that either the user revokes access, or Instagram expires the token after some period of time. In this case, your meta of your responses will contain an “error_type=OAuthAccessTokenError”. In other words: do not assume your access_token is valid forever."

from oauth2.

reading this it might be best to use a combination of the suggested approaches for dealing with this, i.e. use an estimate for token expiry and a test at the end of that estimate if expiry is not supplied :
https://rnd.feide.no/2012/04/19/best-practice-for-dealing-with-oauth-2-0-token-expiration-at-the-consumer/

(excellent work on this lib by the way :)

from oauth2.

The develop branch now has accessTokenAssumeUnexpired, which is true by default, to handle these cases.

from oauth2.

This is now in 1.2.7.

from oauth2.