Mitar

You mean `RandomBytes`? But then the lock could be in `RandomBytes`?

I added to my introspect endpoint handler: ``` if ir.GetTokenUse() == "refresh_token" { w.Header().Set("Content-Type", "application/json;charset=UTF-8") w.Header().Set("Cache-Control", "no-store") w.Header().Set("Pragma", "no-cache") if !ir.IsActive() { _ = json.NewEncoder(w).Encode(&struct { Active bool `json:"active"` }{Active:...

So should the above be added in PR to fosite?

@aeneasr: What about this?

@aeneasr: Would you be open for a PR for this?

Let's see. From my side I am able to use both versions at the same time, but it is ugly. So I think it will probably just mean you will...

It bumps go to minimum 1.21. Also, I see replace directives in go.mod, is there any reason to keep them in? They seem redundant and not used?

I made https://github.com/ory/fosite/pull/824. See comments there.

> I was also under the impression that the OpenID Sessions were deleted upon completion of the flow (maybe it's only for successful ones). Oh, this has been changed just...

This can be closed because it has been done in #672?