{"action":"closed","issue":{"url":"https://api.github.com/repos/mbukosky/SpotifyUnchained/issues/38","labels_url":"https://api.github.com/repos/mbukosky/SpotifyUnchained/issues/38/labels{/name}","comments_url":"https://api.github.com/repos/mbukosky/SpotifyUnchained/issues/38/comments","events_url":"https://api.github.com/repos/mbukosky/SpotifyUnchained/issues/38/events","html_url":"https://github.com/mbukosky/SpotifyUnchained/issues/38","id":59834182,"number":38,"title":"Security hole","user":{"login":"mbukosky","id":6832123,"avatar_url":"https://avatars.githubusercontent.com/u/6832123?v=3","gravatar_id":"","url":"https://api.github.com/users/mbukosky","html_url":"https://github.com/mbukosky","followers_url":"https://api.github.com/users/mbukosky/followers","following_url":"https://api.github.com/users/mbukosky/following{/other_user}","gists_url":"https://api.github.com/users/mbukosky/gists{/gist_id}","starred_url":"https://api.github.com/users/mbukosky/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mbukosky/subscriptions","organizations_url":"https://api.github.com/users/mbukosky/orgs","repos_url":"https://api.github.com/users/mbukosky/repos","events_url":"https://api.github.com/users/mbukosky/events{/privacy}","received_events_url":"https://api.github.com/users/mbukosky/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mbukosky/SpotifyUnchained/labels/bug","name":"bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":{"login":"mbukosky","id":6832123,"avatar_url":"https://avatars.githubusercontent.com/u/6832123?v=3","gravatar_id":"","url":"https://api.github.com/users/mbukosky","html_url":"https://github.com/mbukosky","followers_url":"https://api.github.com/users/mbukosky/followers","following_url":"https://api.github.com/users/mbukosky/following{/other_user}","gists_url":"https://api.github.com/users/mbukosky/gists{/gist_id}","starred_url":"https://api.github.com/users/mbukosky/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mbukosky/subscriptions","organizations_url":"https://api.github.com/users/mbukosky/orgs","repos_url":"https://api.github.com/users/mbukosky/repos","events_url":"https://api.github.com/users/mbukosky/events{/privacy}","received_events_url":"https://api.github.com/users/mbukosky/received_events","type":"User","site_admin":false},"milestone":null,"comments":2,"created_at":"2015-03-04T17:46:37Z","updated_at":"2015-03-05T22:20:08Z","closed_at":"2015-03-05T22:20:08Z","body":"Remove the refresh token from the client user object.\r\n\r\n``` javascript\r\n $scope.refreshToken = function() {\r\n      $http.get('/auth/spotify/refresh', {\r\n        params: {\r\n          refresh_token: $scope.user.providerData.refreshToken\r\n        }\r\n      }).success(function(response) {\r\n        // Update the user with new tokens\r\n        $scope.user = Authentication.user = response;\r\n        $location.path('/');\r\n      }).error(function(response) {\r\n        console.log(response.message);\r\n      });\r\n    };\r\n```"}}