{"action":"created","issue":{"url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/524","labels_url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/524/labels{/name}","comments_url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/524/comments","events_url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/524/events","html_url":"https://github.com/simplabs/ember-simple-auth/issues/524","id":76094360,"number":524,"title":"(OAuth2 Authenticator) Invalidate method does not POST to serverTokenRevocationEndpoint","user":{"login":"green-arrow","id":2180127,"avatar_url":"https://avatars.githubusercontent.com/u/2180127?v=3","gravatar_id":"","url":"https://api.github.com/users/green-arrow","html_url":"https://github.com/green-arrow","followers_url":"https://api.github.com/users/green-arrow/followers","following_url":"https://api.github.com/users/green-arrow/following{/other_user}","gists_url":"https://api.github.com/users/green-arrow/gists{/gist_id}","starred_url":"https://api.github.com/users/green-arrow/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/green-arrow/subscriptions","organizations_url":"https://api.github.com/users/green-arrow/orgs","repos_url":"https://api.github.com/users/green-arrow/repos","events_url":"https://api.github.com/users/green-arrow/events{/privacy}","received_events_url":"https://api.github.com/users/green-arrow/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/simplabs/ember-simple-auth/labels/bug","name":"bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/simplabs/ember-simple-auth/milestones/19","html_url":"https://github.com/simplabs/ember-simple-auth/milestones/0.8.0","labels_url":"https://api.github.com/repos/simplabs/ember-simple-auth/milestones/19/labels","id":966086,"number":19,"title":"0.8.0","description":"","creator":{"login":"marcoow","id":1510,"avatar_url":"https://avatars.githubusercontent.com/u/1510?v=3","gravatar_id":"","url":"https://api.github.com/users/marcoow","html_url":"https://github.com/marcoow","followers_url":"https://api.github.com/users/marcoow/followers","following_url":"https://api.github.com/users/marcoow/following{/other_user}","gists_url":"https://api.github.com/users/marcoow/gists{/gist_id}","starred_url":"https://api.github.com/users/marcoow/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marcoow/subscriptions","organizations_url":"https://api.github.com/users/marcoow/orgs","repos_url":"https://api.github.com/users/marcoow/repos","events_url":"https://api.github.com/users/marcoow/events{/privacy}","received_events_url":"https://api.github.com/users/marcoow/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":13,"state":"open","created_at":"2015-02-04T20:34:14Z","updated_at":"2015-05-13T19:27:12Z","due_on":null,"closed_at":null},"comments":2,"created_at":"2015-05-13T19:23:18Z","updated_at":"2015-05-13T19:27:12Z","closed_at":"2015-05-13T19:27:12Z","body":"In the `invalidate` function of the OAuth2 Authenticator, the `access_token` and `refresh_token` are sent to the `serverTokenRevocationEndpoint`, if one is configured. The problem is in how this function checks for the existence of the tokens:\r\n\r\n```javascript\r\n// data[tokenType] is never defined,\r\n// since everything lives under data.secure\r\nif (!Ember.isEmpty(data[tokenType])) {\r\n  requests.push(_this.makeRequest(_this.serverTokenRevocationEndpoint, {\r\n    token_type_hint: tokenType, token: data[tokenType]\r\n  }));\r\n}\r\n```"},"comment":{"url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/comments/101784031","html_url":"https://github.com/simplabs/ember-simple-auth/issues/524#issuecomment-101784031","issue_url":"https://api.github.com/repos/simplabs/ember-simple-auth/issues/524","id":101784031,"user":{"login":"marcoow","id":1510,"avatar_url":"https://avatars.githubusercontent.com/u/1510?v=3","gravatar_id":"","url":"https://api.github.com/users/marcoow","html_url":"https://github.com/marcoow","followers_url":"https://api.github.com/users/marcoow/followers","following_url":"https://api.github.com/users/marcoow/following{/other_user}","gists_url":"https://api.github.com/users/marcoow/gists{/gist_id}","starred_url":"https://api.github.com/users/marcoow/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marcoow/subscriptions","organizations_url":"https://api.github.com/users/marcoow/orgs","repos_url":"https://api.github.com/users/marcoow/repos","events_url":"https://api.github.com/users/marcoow/events{/privacy}","received_events_url":"https://api.github.com/users/marcoow/received_events","type":"User","site_admin":false},"created_at":"2015-05-13T19:27:12Z","updated_at":"2015-05-13T19:27:12Z","body":"Actually that's already fixed as the session only passes the secure session data to the authenticator's `invalidate` method."}}