applicake/doorkeeper — pull request #225 by jwood (2013-04-08 15:34:14+00:00)
Title: Add created_at to token response

Please excuse my naïvety. I'm relatively new to OAuth, so I may be missing something here...

However, it seems to me that the token response should contain the time the token was created, so the true token expiration time can be determined (created_at + expires_in). It appears that the value of expires_in that is returned is a static value, and does not change with the age of the token, so using that alone isn't enough to determine when a token actually expires.