Single token authorization based on user and consumer

I develop a patch to let users that had any validated token for the application which is consuming the service, to log in automagically without request an authorization every time the user login in a provider application.

It checks the consumer, the user id, the expiration date and the authorization. I think there are sufficient factors to let the users omit the authorazation check.