authorizationRequestParameters isAuthorized flag

[olivierbufalini]

in the Mongo DB seems like in the collection authorizationRequestParameters isAuthorized is always set to false, is it normal?

Also it seems like after sometimes the record get removed from the collection accessParameters is that related ? is there something that removes the records in that collection after say 24hours if the isAuthorized is set to false ?

[emersonf]

isAuthorized is a transient DTO field from ages ago that made its way into the persistence model. It should get removed.

The reason accessParameters documents are sometimes deleted is that's how Spring Security OAuth 2.0 works when an access token expires and a refresh is going to be initiated. The problem is that if the refresh fails, the refresh token is gone too. I'm not sure how well SS O2 is being maintained, I've been looking into alternatives.

[olivierbufalini]

Ok I see, when does the refresh is initiated ? when a new request is made and the token has expired ?