added docstring for rotate_refresh_token, removed unused import, chagelog modified

Author: Girbons

AUTHORS

@@ -22,3 +22,4 @@ Jim Graham
 pySilver
 Silvano Cerza
 Federico Dolce
+Alessandro De Angelis

docs/changelog.rst

@@ -4,6 +4,7 @@ Changelog
 Development
 ~~~~~~~~~~~
 
+* #424: Added a ROTATE_REFRESH_TOKEN setting to control whether refresh tokens are reused or not
 * #315: AuthorizationView does not overwrite requests on get
 * #425: Added support for Django 1.10
 * #396: Added an IsAuthenticatedOrTokenHasScope Permission

oauth2_provider/oauth2_validators.py

@@ -299,6 +299,7 @@ def save_authorization_code(self, client_id, code, request, *args, **kwargs):
 
     def rotate_refresh_token(self, request):
         """
+        Checks if rotate refresh token is enabled
         """
         return oauth2_settings.ROTATE_REFRESH_TOKEN
 

oauth2_provider/settings.py

@@ -155,4 +155,5 @@ def validate_setting(self, attr, val):
         if not val and attr in self.mandatory:
             raise AttributeError("OAuth2Provider setting: '%s' is mandatory" % attr)
 
+
 oauth2_settings = OAuth2ProviderSettings(USER_SETTINGS, DEFAULTS, IMPORT_STRINGS, MANDATORY)

oauth2_provider/tests/test_authorization_code.py

@@ -3,7 +3,6 @@
 import base64
 import json
 import datetime
-import mock
 
 from django.contrib.auth import get_user_model
 from django.core.urlresolvers import reverse