Fixed token refresh for clientless access tokens

Conflicts:
CHANGELOG.md
lib/doorkeeper/version.rb

It is now possible for clients to reduce the scopes for an access token
when refreshing it

Fixed issue with invalid client credentials in password grant

If client credentials are provided during the Resource Owner Password
Grant flow, they will be v...

Resolve test warnings for Rails 4

Signed-off-by: Phill Sparks <[email protected]>

Update Revoke all to revoke tokens, not delete them.

Since the action is the same for all ORMs, move it up into the access_token class.

Remove application.js from layout

This causes errors in production mode as application.js does not exist.

Made client optional for password grant type

AccessToken now has an optional association with Application

Fix example code in README.md

When `User.find` doesn't find any record,
it raises `ActiveRecord::RecordNotFound`.

Changed generation behavior on Application creation

The callbacks that generate client uid and secret for the Application
model will now check if o...

added ActionController::Instrumentation in TokensController

Note: Version 1.0.0 is not what was being prepared by @felipeelias, as
he couldn't continue main...

Fix token response `expires_in` value to be relative to request time

Update CHANGELOG to reflect what is currently "unreleased"

Use attr_accessible if ProtectedAttributes gem is present

Allow to overwrite scope in routes

Thanks to @AzizLight for feedback on
https://github.com/applicake/doorkeeper/issues/220

Ref: ht...

Fix small typo

Include missing routes generated in README

Relax jquery-rails gem dependency

Do not try to load unavailable Request class for the current phase.

increase length of redirect_uri columns

Allow issuing multiple access_tokens for one user/application for multiple devices

Returning the existing token when there was one accessible let to
issues when dealing with multi...

Add a configuration for ActiveRecord.establish_connection

In order to share doorkeeper models among the authorization server and
resource servers, you can...

add jquery as gem dependency

This makes overriding the default authorization much less code.
If you agree, I'll add a test.

This reverts commit b47c625b0484c8c8fb46f568501cdb5b647b79e6.

If you send grant_type=code for token request for example, you'll see
runtime exceptions such as...

Rails 4 support

Falls back to `params#slice` if `params#permit` is not available.