Setting `:use_refresh_token` in config not working about ex_oauth2_provider

[danschultzer]

It's because it's passed along as param, since some strategies (like client credentials) must not permit refresh token.

There should be tests for it in all strategies, e.g. here's for the code flow strategy (this was some of the earliest code I wrote in elixir so not very idiomatic if refute is_nil):

ex_oauth2_provider/test/ex_oauth2_provider/oauth2/token/strategy/authorization_code_test.exs

Lines 36 to 46 in d602d8e

	test "#grant/2 returns access token", %{resource_owner: resource_owner, application: application, access_grant: access_grant} do
	assert {:ok, body} = Token.grant(@valid_request, otp_app: :ex_oauth2_provider)
	access_token = QueryHelpers.get_latest_inserted(OauthAccessToken)
	assert body.access_token == access_token.token
	assert access_token.resource_owner_id == resource_owner.id
	assert access_token.application_id == application.id
	assert access_token.scopes == access_grant.scopes
	assert access_token.expires_in == Config.access_token_expires_in(otp_app: :ex_oauth2_provider)
	refute is_nil(access_token.refresh_token)
	end

[blatyo]

I see. We were creating access tokens directly from AccessTokens.create_token/3, because we're migrating users from one system into another specifically for auth. So, it was surprising to us when we noticed we didn't have refresh tokens, but had configured it.

[danschultzer]

Yeah, it's confusing. I should had called it something different in the db than what it's called in the config. I mostly just ported it straight from doorkeeper.