reneweb / oauth2orize_resource_owner_password_example Goto Github PK

Thanks for posting this example.

I believe the implementation is slightly broken.

Attempting to authenticate with an expired access token causes it to be removed from the server:

When a client then attempts to obtain a new access token using a refresh token, the original access token no longer exists for updating and thus authentication fails: