Merge pull request #1712 from ransombriggs/add-pragma-no-cache-to-tok…

…en-response

Add Pragma: no-cache to token response

lib/doorkeeper/oauth/token_response.rb

@@ -30,6 +30,7 @@ def headers
         {
           "Cache-Control" => "no-store, no-cache",
           "Content-Type" => "application/json; charset=utf-8",
+          "Pragma" => "no-cache",
         }
       end
     end

spec/lib/oauth/token_response_spec.rb

@@ -8,6 +8,7 @@
   it "includes access token response headers" do
     headers = response.headers
     expect(headers.fetch("Cache-Control")).to eq("no-store, no-cache")
+    expect(headers.fetch("Pragma")).to eq("no-cache")
   end
 
   it "status is ok" do

spec/requests/endpoints/token_spec.rb

@@ -17,6 +17,7 @@
 
     expect(headers["Cache-Control"]).to be_in(["no-store", "no-cache, no-store", "private, no-store"])
     expect(headers["Content-Type"]).to eq("application/json; charset=utf-8")
+    expect(headers["Pragma"]).to eq("no-cache")
   end
 
   it "accepts client credentials with basic auth header" do