lib/rack/oauth2/models/access_grant.rb in rack-oauth2-server-2.0.0.beta vs lib/rack/oauth2/models/access_grant.rb in rack-oauth2-server-2.0.0.beta2
- old
+ new
@@ -51,10 +51,10 @@
# requests to obtain it, so we need to make sure only first request is
# successful in returning access token, futher requests raise
# InvalidGrantError.
def authorize!
raise InvalidGrantError if self.access_token || self.revoked
- access_token = AccessToken.get_token_for(identity, scope, client_id)
+ access_token = AccessToken.get_token_for(identity, client_id, scope)
self.access_token = access_token.token
self.granted_at = Time.now.utc.to_i
self.class.collection.update({ :_id=>code, :access_token=>nil, :revoked=>nil }, { :$set=>{ :granted_at=>granted_at, :access_token=>access_token.token } }, :safe=>true)
reload = self.class.collection.find_one({ :_id=>code, :revoked=>nil }, { :fields=>%w{access_token} })
raise InvalidGrantError unless reload && reload["access_token"] == access_token.token