[SHINDIG-1651] Security tokens aren't returned on the iframeurl as part of a metadata response when the gadget uses OAuth

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5.0-beta1
• Fix Version/s: 2.5.0-beta1
• Component/s: Java
• Assignee: Unassigned
• Reporter: Stanton Sievers
• Created: 26/Oct/11 13:44
• Updated: 29/Mar/12 20:58
• Resolved: 31/Oct/11 11:55

Description

If a gadget uses OAuth but requires no other features that depend on the "security-token" feature, a security token is not returned on the iframeurl when it should be. This stems from the fact that ModulePrefs.getViewFeatures() doesn't pick up the artificially added "security-token" feature that gets added by the FeatureVisitor if the OAuthVisitors found oauth tags.