public async Task Wrong_Client_Binding_RefreshToken_Request()
{
var refreshToken = new RefreshToken
{
AccessToken = new Token("access_token"),
ClientId = "otherclient",
LifeTime = 600,
Handle = Guid.NewGuid().ToString(),
CreationTime = DateTime.UtcNow
};
var store = new InMemoryRefreshTokenStore();
await store.StoreAsync(refreshToken.Handle, refreshToken);
var client = await _clients.FindClientByIdAsync("roclient");
var validator = Factory.CreateTokenValidator(
refreshTokens: store);
var parameters = new NameValueCollection();
parameters.Add(Constants.TokenRequest.GrantType, "refresh_token");
parameters.Add(Constants.TokenRequest.RefreshToken, refreshToken.Handle);
var result = await validator.ValidateRequestAsync(parameters, client);
Assert.IsTrue(result.IsError);
Assert.AreEqual(Constants.TokenErrors.InvalidGrant, result.Error);
}
public Task StoreAsync(string key, RefreshToken value)
{
_repository[key] = value;
return Task.FromResult<object>(null);
}