Various fixes to the sample OAuth 2.0 Authorization Server sample.

1 files changed, 4 insertions, 0 deletions

diff --git a/samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs b/samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs
index 90f99f8..e2e4325 100644
--- a/samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs
+++ b/samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs
@@ -108,6 +108,10 @@
 		}
 
 		private bool IsAuthorizationValid(HashSet<string> requestedScopes, string clientIdentifier, DateTime issuedUtc, string username) {
+			// If db precision exceeds token time precision (which is common), the following query would
+			// often disregard a token that is minted immediately after the authorization record is stored in the db.
+			// To compensate for this, we'll increase the timestamp on the token's issue date by 1 second.
+			issuedUtc += TimeSpan.FromSeconds(1);
 			var grantedScopeStrings = from auth in MvcApplication.DataContext.ClientAuthorizations
 			                          where
 			                              auth.Client.ClientIdentifier == clientIdentifier &&