Commit d48110d

@@ -30,7 +30,7 @@ module Oauth
         return if Token.revoked?(claims[:jti]) || claims.empty?
         Token.find(claims[:jti])
       end
-      request_http_token_authentication unless @token.present?
+      return request_http_token_authentication unless @token.present?
 
       unless Client.where(id: params[:id]).exists?
         @token.revoke!

@@ -119,5 +119,13 @@ RSpec.describe "/oauth/clients" do
       specify { expect(response).to have_http_status(:unauthorized) }
       specify { expect(access_token.reload).to be_revoked }
     end
+
+    context "when an authorization header is not provided" do
+      let(:client) { create(:client) }
+
+      before { get "/oauth/clients/#{client.to_param}", headers: {} }
+
+      specify { expect(response).to have_http_status(:unauthorized) }
+    end
   end
 end