Fix check_client_type for refresh_token.
@@ -37,7 +37,7 @@ class RefreshTokenGrant(BaseGrant):
client = self.authenticate_token_endpoint_client()
log.debug('Validate token request of %r', client)
- if client.check_client_type('public'):
+ if not client.check_client_type('confidential'):
raise UnauthorizedClientError()
if not client.check_grant_type(self.GRANT_TYPE):
