From 6a8f838d9c2073b41ce4cfb63634e6c1aae02ce8 Mon Sep 17 00:00:00 2001
From: Stian Thorgersen <stianst@gmail.com>
Date: Wed, 18 Sep 2013 19:44:56 +0100
Subject: [PATCH] KEYCLOAK-52 AccessCode could expire when oauth-client
 application (OAuth grant flow) is used

---
 .../java/org/keycloak/services/resources/flows/OAuthFlows.java   | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/src/main/java/org/keycloak/services/resources/flows/OAuthFlows.java b/services/src/main/java/org/keycloak/services/resources/flows/OAuthFlows.java
index 66503e2f56..a71e8ac86f 100755
--- a/services/src/main/java/org/keycloak/services/resources/flows/OAuthFlows.java
+++ b/services/src/main/java/org/keycloak/services/resources/flows/OAuthFlows.java
@@ -90,6 +90,7 @@ public class OAuthFlows {
                         .size() > 0)));
         if (!isResource
                 && (accessCode.getRealmRolesRequested().size() > 0 || accessCode.getResourceRolesRequested().size() > 0)) {
+            accessCode.setExpiration(System.currentTimeMillis() / 1000 + realm.getAccessCodeLifespanUserAction());
             return oauthGrantPage(accessCode, client);
         }