- changed status to open
-
assigned issue to
David Larlet
Minor issue in test - not recalculating the signature when changing the nonce
There is a minor bug in the test line below
http://bitbucket.org/david/django-oauth/src/tip/oauth_provider/tests.py#cl-475
Although the nonce is changed, the old signature is reused. In this particular case because what is being tested is the revocation of the access_token and that is still fine, however in the case the access_token is not revoked, the tests still (wrongly) returns a 401, however for the signature being wrong instead. This might lead to confusion.
Comments (3)
-
David Larlet
-
mohangk
No problem, spotted it when I was working on porting django-oauth to appengine - http://github.com/mohangk/appengine_oauth_provider.
-
David Larlet
- changed status to resolved
- Log in to comment »
Very good catch given the complexity of the process, thanks!