Prevent save_token() from being called twice within create_token_response(). We call save_token() after any token modifiers have run so we can tell the token_handler's create_token() method not to save the token and do that explicitly ourselves.

1 files changed, 2 insertions, 0 deletions

diff --git a/tests/oauth2/rfc6749/grant_types/test_client_credentials.py b/tests/oauth2/rfc6749/grant_types/test_client_credentials.py
index d7e50c3..0865c7e 100644
--- a/tests/oauth2/rfc6749/grant_types/test_client_credentials.py
+++ b/tests/oauth2/rfc6749/grant_types/test_client_credentials.py
@@ -27,6 +27,7 @@ class ClientCredentialsGrantTest(TestCase):
         headers, body, status_code = self.auth.create_token_response(
                 self.request, bearer)
         token = json.loads(body)
+        self.assertEqual(self.mock_validator.save_token.call_count, 1)
         self.assertIn('access_token', token)
         self.assertIn('token_type', token)
         self.assertIn('expires_in', token)
@@ -38,6 +39,7 @@ class ClientCredentialsGrantTest(TestCase):
         self.mock_validator.authenticate_client.return_value = False
         headers, body, status_code = self.auth.create_token_response(
             self.request, bearer)
+        self.assertEqual(self.mock_validator.save_token.call_count, 0)
         error_msg = json.loads(body)
         self.assertIn('error', error_msg)
         self.assertEqual(error_msg['error'], 'invalid_client')