SpringSource/spring-security-oauth — pull request #54 by Hons (2012-10-26 14:16:43+00:00)
Title: SECOAUTH-279: DefaultTokenServices detect when a refresh token is exp…

...d and replace it.

I think the original fix (https://github.com/SpringSource/spring-security-oauth/commit/00899995f68404ac25e6dfdcc8ed04af3d53f0e8#diff-2) is just a workaround for the sparklr2 case.

Other implementations that use expiring refresh tokens will still suffer from this bug.

A better(?) solution may be to detect an expired refresh token and replace it during the createAccessToken stage of authentication.