Skip to content

expires_in must be an integer, not a string in IMPLICIT #569

@JonathanHuot

Description

@JonathanHuot

RFC 6749 mandate expires_in to be an integer (https://tools.ietf.org/html/rfc6749#appendix-A.14) but looks like the integer conversion is not done for implicit grant (oauth2-client side).

We can see the current implementation for the oauth2.parameters.parse_token_response: https://github.com/oauthlib/oauthlib/blob/master/oauthlib/oauth2/rfc6749/parameters.py#L367

And the missing conversion code in the parse_implicit_response : https://github.com/oauthlib/oauthlib/blob/master/oauthlib/oauth2/rfc6749/parameters.py#L367

Metadata

Metadata

Assignees

Labels

OAuth2-ClientThis impact the client part of OAuth2.

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions