1aec562724
OAuthContext.timeout was assigned in the constructor but never read anywhere, so the parameter has never bounded anything since the OAuth client was added. Drop it from OAuthClientProvider, the deprecated RFC7523OAuthClientProvider, and OAuthContext rather than keep a knob that silently does nothing.