Re: Expected behavior when OAuth2 access token expires and no refresh token was given

2012-01-17 Thread A Clarke
Mike, The intended behavior on a OAuth2Request is to never return a 40X to the gadget and should be independent of the persister queries you describe. (One area I'm still a little fuzzy on myself.) A = Access Token R = Referesh Token + = in persistence and valid, not-expired - = does not exist i

Expected behavior when OAuth2 access token expires and no refresh token was given

2012-01-17 Thread Michael Matthews
Hello, I'm testing our OAuth2 consumer implementation with Shindig's oauth2_google.xml gadget. Google is sending an access token (and no refresh token) and everything works until that access token expires. When that access token expires, what is the expected behavior? Should Shindig attempt to re