File Coverage

lib/LWP/Authen/OAuth2/AccessToken/Bearer.pm

Criterion	Covered	Total	%
statement	12	18	66.6
branch	0	2	0.0
condition	0	3	0.0
subroutine	4	5	80.0
pod			n/a
total	16	28	57.1

package LWP::Authen::OAuth2::AccessToken::Bearer;

# ABSTRACT: Bearer access tokens for OAuth2
our $VERSION = '0.20'; # VERSION

use strict;
use warnings;
use base "LWP::Authen::OAuth2::AccessToken";
use Storable qw(dclone);

sub _request {
    my ($self, $oauth2, $request, @rest) = @_;
    my $actual_request = dclone($request);
    # This is where we sign it.
    $actual_request->header('Authorization' => "Bearer $self->{access_token}");
    my $response = $oauth2->user_agent->request($actual_request, @rest);

    # One would hope for a 401 status, but the specification only requires
    # this header.  (Though recommends a 401 status.)
    my $try_refresh = ($response->header("WWW-Authenticate")||'') =~ m/\binvalid_token\b/
      || ($response->header('Client-Warning')||'') =~ m/Missing Authenticate header/ # Dwolla does not send WWW-Authenticate
      || $response->content() =~ m/\bExpiredAccessToken\b/
      ? 1 : 0;
    return ($response, $try_refresh);
}


1;

__END__