client_credentials should not generate a refresh token

fixes openshift#31
scramblesuit · Oct 12, 2014 · 449d867 · 449d867
1 parent 1f4e975
commit 449d867
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/access.go b/access.go
@@ -335,7 +335,7 @@ func (s *Server) handleClientCredentialsRequest(w *Response, r *http.Request) *A
 	ret := &AccessRequest{
 		Type:            CLIENT_CREDENTIALS,
 		Scope:           r.Form.Get("scope"),
-		GenerateRefresh: true,
+		GenerateRefresh: false,
 		Expiration:      s.Config.AccessExpiration,
 		HttpRequest:     r,
 	}

diff --git a/access_test.go b/access_test.go
@@ -189,7 +189,7 @@ func TestAccessClientCredentials(t *testing.T) {
 		t.Fatalf("Unexpected access token: %s", d)
 	}
 
-	if d := resp.Output["refresh_token"]; d != "r1" {
-		t.Fatalf("Unexpected refresh token: %s", d)
+	if d, dok := resp.Output["refresh_token"]; dok {
+		t.Fatalf("Refresh token should not be generated: %s", d)
 	}
 }