lib/rack/oauth2/models/access_grant.rb in rack-oauth2-server-2.0.0.beta vs lib/rack/oauth2/models/access_grant.rb in rack-oauth2-server-2.0.0.beta2

- old
+ new

@@ -51,10 +51,10 @@ # requests to obtain it, so we need to make sure only first request is # successful in returning access token, futher requests raise # InvalidGrantError. def authorize! raise InvalidGrantError if self.access_token || self.revoked - access_token = AccessToken.get_token_for(identity, scope, client_id) + access_token = AccessToken.get_token_for(identity, client_id, scope) self.access_token = access_token.token self.granted_at = Time.now.utc.to_i self.class.collection.update({ :_id=>code, :access_token=>nil, :revoked=>nil }, { :$set=>{ :granted_at=>granted_at, :access_token=>access_token.token } }, :safe=>true) reload = self.class.collection.find_one({ :_id=>code, :revoked=>nil }, { :fields=>%w{access_token} }) raise InvalidGrantError unless reload && reload["access_token"] == access_token.token