Well, here's what I think about the bug. I accessed the site, authorized it and revoked the access (the cookie was still in my browser) the @authenticated decorator was "gamed"
- directeur
That's the reason for this line of code: http://code.google.com/p.... @authenticated just guarantees that you have a token, not that it is a valid one. If you get a 401 you should get a new token.
- Benjamin Golub