joshsoftware/sso-devise-omniauth-provider — Issue #7: AccessToken expiry...
Author: brockgr
Created: 2012-02-06 09:03:00+00:00
State: open

In the AuthController, when a client is granted an access token (an AccessGrant instance) and `start_expiry_period!` is called, an expiry of two days is stored in the database. However the AuthController then goes on to send an `expires_in` of `Devise.timeout_in` to the client, which in my case seems to be 30 minutes.

Unless I'm mistaken (which is quite possible!), shouldn't the `expires_in` be read from the AccessGrant, or both of theses read from Devise.timeout_in?

If you have a preference for which, I'll put in a pull request.

Regards,

Gavin