Aditya Kumar Gupta

Is it really necessary to delete atomically in `clear_expired` tokens?

1

Currently in `clear_expired` function we have: ``` with transaction.atomic(): if refresh_expire_at: refresh_token_model.objects.filter(revoked__lt=refresh_expire_at).delete() refresh_token_model.objects.filter(access_token__expires__lt=refresh_expire_at).delete() access_token_model.objects.filter(refresh_token__isnull=True, expires__lt=now).delete() grant_model.objects.filter(expires__lt=now).delete() ``` Somewhere down in the past year, this function started timing out for us...

revoking AccessToken only and then using RefreshToken token to generate new AccessToken breaks.

9

**Describe the bug** Revoking `AccessTokens` does not revoke the corresponding `RefreshTokens`. So in case, `AccessToken` is revoked, its deleted from the dB. If a request for a new token on...

The input to the Model and the target is the same.

2

Hi, I have been trying to understand the provided code and have certain concerns about the decoder. main.py contains the following pieces of code ``` out = prepared_batch[2][:, :] tar...