Mashape/guardian — pull request #8 by simov (2014-08-16 11:28:38+00:00)
Title: Return full results in OAuth1 flow

:wave:

This might be out of the spec's scope but some servers return more than just access token and secret

Like for example [yahoo's refresh token thing](https://developer.yahoo.com/oauth/guide/oauth-refreshaccesstoken.html)

Essentially without the `oauth_session_handle` parameter I can't automate that process, because otherwise I need to make request to the authorization url again (which requires user interaction in Yahoo's case)

With this fix the result query string for the final callback looks like this (for Yahoo)
```js
{ oauth_expires_in: '3600',
oauth_session_handle: '1AMPK7VM5Vbs4yQAOdkBzZs8Z0B9ODS2k9KpL6OvZ3a6SFS.yFQMxmw--',
oauth_authorization_expires_in: '739295544',
xoauth_yahoo_guid: 'C6YWVTVM24O4SEGIIDLTWA5NUA',
access_token: '...',
access_secret: '...' }
```