fix: is_legacy_token default

Author: jaelee213

oauth2_provider/oauth2_validators.py

@@ -481,9 +481,9 @@ def save_bearer_token(self, token, request, *args, **kwargs):
         # Users on older app versions should get long-lived tokens for
         # backwards compatibility.
         TRUE_VALUES = [True, 'True', 'true']
-        is_legacy_token = getattr(request, 'is_legacy_token') in TRUE_VALUES
+        is_legacy_token = getattr(request, 'is_legacy_token', False)
 
-        if is_legacy_token:
+        if is_legacy_token in TRUE_VALUES:
             expire_seconds = oauth2_settings.LEGACY_ACCESS_TOKEN_EXPIRE_SECONDS
         else:
             expire_seconds = app.access_token_expire_seconds