📢 Moderators Needed 🚀

Moderators are needed with resources to post or have access to resources to post. Submit an application to be considered.
S

RSS OAuth2 Client - Revoking an application doesn't revoke refresh token

S

stromb0li

Guest
Guest or Bot
Repro:
1) Create OAuth2 Application; Public flow
2) Request an access token
3) Revoke the application via Admin CP or User Settings -> Applications.
4) Use of the access token will result in 401 forbidden when making an API call (as expected)
5) Use the existing refresh token to request a new access token. An access and refresh token is issued, application conscent is granted, and access to the API is resumed <- Not expected

Expected behavior: access and refresh token would both be revoked...

Read more

Continue reading...
 
W
RSS  Odd problem with many different IPs accessing the same thread
R
RSS  To do list [Paid]
You must log in or register to reply here.
Similar content Most view View more
Back
Top