Basic OAuth2 provider code, extracted from the hashblue.com site
Regenerated gemspec and added placeholder README
Remove Warden as a development dependency
Ensure warden is bypassed when authentication fails.
Move token role management (such that it is) into its own module
Move common token expiry functionality into dedicated module
Access tokens and authorization codes aren't valid without an associated client
We're using the password grant type here, not authorization code
Requests should be invalid if an oauth_token is provided in both a parameter and header
Access tokens should still be grantable when using a custom client class
Not all clients are allowed to use all oauth grant types
When no oauth token is passed, respond with status 401 and an OAuth authorization challenge
Allow querying of access tokens and authorization codes as to whether they have a given scope
First draft towards a refresh token implementation.  Not sure you should be able to refresh tokens ad infinitum.
Add 'tag' task to Rakefile, allowing versions to be tagged and released
Released version 0.0.1
Ignore built gems
Introducing an access grant model means that client, account and scope information doesn't have to be copied from code to token to refreshed token.
Respect access grant expiry when creating and refreshing access tokens
Allow an access grant to be revoked, destroying itself and any related access tokens and authorization codes