[CXF-5180] Adding RefreshToken as token type

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.7.6
• Fix Version/s: 2.6.10, 2.7.7, 3.0.0-milestone1
• Component/s: JAX-RS Security
• Labels: OAuth2
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Thorsten Hoeger
• Created: 05/Aug/13 21:25
• Updated: 27/Sep/13 18:18
• Resolved: 15/Aug/13 11:17

Description

It may be useful to have a dedicated RefreshToken class (subclassing ServerAccessToken) to represent the generated refresh token. This allows implementors to drop the BearerAccessToken on expiry and persist the RefreshToken until used by the client.