Merge pull request #70 from a-p-o/patch-1

Add Cache-Control and Pragma headers to Access Token responses

Author: adhesivee

oauth2-server-core/src/main/java/nl/myndocs/oauth2/grant/CallRouterDefault.kt

@@ -21,6 +21,8 @@ fun GrantingCall.grantPassword() = granter("password") {
             )
     )
 
+    callContext.respondHeader("Cache-Control", "no-store")
+    callContext.respondHeader("Pragma", "no-cache")
     callContext.respondJson(accessTokenResponder.createResponse(accessToken))
 }
 
@@ -31,6 +33,8 @@ fun GrantingCall.grantClientCredentials() = granter("client_credentials") {
             callContext.formParameters["scope"]
     ))
 
+    callContext.respondHeader("Cache-Control", "no-store")
+    callContext.respondHeader("Pragma", "no-cache")
     callContext.respondJson(accessTokenResponder.createResponse(accessToken))
 }
 
@@ -43,6 +47,8 @@ fun GrantingCall.grantRefreshToken() = granter("refresh_token") {
             )
     )
 
+    callContext.respondHeader("Cache-Control", "no-store")
+    callContext.respondHeader("Pragma", "no-cache")
     callContext.respondJson(accessTokenResponder.createResponse(accessToken))
 }
 
@@ -56,6 +62,8 @@ fun GrantingCall.grantAuthorizationCode() = granter("authorization_code") {
             )
     )
 
+    callContext.respondHeader("Cache-Control", "no-store")
+    callContext.respondHeader("Pragma", "no-cache")
     callContext.respondJson(accessTokenResponder.createResponse(accessToken))
 }
 
@@ -106,4 +114,4 @@ fun GrantingCall.throwExceptionIfUnverifiedClient(clientRequest: ClientRequest)
 
 fun GrantingCall.scopesAllowed(clientScopes: Set<String>, requestedScopes: Set<String>): Boolean {
     return clientScopes.containsAll(requestedScopes)
-}
+}