feat: add configuration

src/grant-types/refresh-token.js

@@ -18,11 +18,13 @@ export default function({
   tokenModel,
   tokenField,
   accessTokenTTL,
-  refreshTokenTTL
-  }) {
+  refreshTokenTTL,
+  destroyTokenAfterUse = true
+}) {
   const {
     refresh_token,
-    scope} = req.body
+    scope
+  } = req.body
 
   if (!_.isString(refresh_token) || refresh_token.length === 0) {
     return Promise.reject(new HTTPError(OAUTH_INVALID_REFRESH_TOKEN))
@@ -51,7 +53,7 @@ export default function({
               ownerId: owner.id
             })
 
-          return Promise
+          const pair = Promise
             .all([accessToken, refreshToken])
             .then(tokens => {
               const [accessToken, refreshToken] = tokens
@@ -63,7 +65,12 @@ export default function({
                 user_id: owner.id
               }
             })
-            .then(() => token.destroy())
+
+          if (destroyTokenAfterUse) {
+            return pair.then(() => token.destroy())
+          }
+
+          return pair
         })
     })
 }

src/oauth.js

@@ -31,7 +31,8 @@ function authorize({userModel, clientModel, tokenModel, codeModel}) {
       client_id,
       redirect_uri,
       scope,
-      state} = Object.assign({}, req.query, req.body)
+      state
+    } = Object.assign({}, req.query, req.body)
 
     if (!client_id || client_id.length === 0) {
       return Promise.reject(new OAuthError(OAUTH_CLIENT_ID_MISSING))
@@ -65,13 +66,19 @@ function authorize({userModel, clientModel, tokenModel, codeModel}) {
   }
 }
 
-function token({userModel, clientModel, tokenModel, codeModel}) {
+function token({
+  userModel,
+  clientModel,
+  tokenModel,
+  codeModel,
+  accessTokenTTL = 1,
+  refreshTokenTTL = 14,
+  destroyTokenAfterUse = false
+}) {
   // TODO Must be set by plugin config or defaults!
   const usernameField = 'email'
   const passwordField = 'password'
   const tokenField = 'token'
-  const accessTokenTTL = 1 // hours
-  const refreshTokenTTL = 14 // days
 
   return function(req, res) {
     const {grant_type} = req.body
@@ -108,7 +115,8 @@ function token({userModel, clientModel, tokenModel, codeModel}) {
         userModel,
         tokenField,
         accessTokenTTL,
-        refreshTokenTTL
+        refreshTokenTTL,
+        destroyTokenAfterUse
       })
     }