Revoked refresh token appears

[melonattacker]

There is a bug that it is displayed on the screen even if the refresh token is revoked in base environment.

Corresponding code in client/app.py

def index():
    ...
    res = db.search(Query()['name'] == session.get('name')) # sometimes returns wrong result
    ...

All documents in db.

{"_default": {"1": {"state": "ZDFXRN2TOHY2UEDLAAPMPJ08YPQYG7C6", "user": "bob"}}}

Query results.

[{'refresh_token': 'Z0NBTTVHA1KOYXWM8Z4N9L0I5DQE76FZGJPV9F99NMOSE53VHL8N8GQCVZPR4HTF', 'token_type': 'Bearer', 'scope': 'hoge huga', 'name': 'bob', 'client_id': 'oauth-client-1'}]

Expected result.

[]

It's probably a bug in tinydb's db.search method, or the behavior of running multiple processes on the uwsgi server.