revoke an used auth code

2024-12-26 06:59:49 +05:30 · 2016-04-10 18:05:16 +02:00 · 2016-04-10 18:05:16 +02:00 · 03e8eb6157
commit 03e8eb6157
parent 7b803365f9
1 changed files with 3 additions and 0 deletions
--- a/src/Grant/AuthCodeGrant.php
+++ b/src/Grant/AuthCodeGrant.php
@ -109,6 +109,9 @@ class AuthCodeGrant extends AbstractAuthorizeGrant
        // Inject tokens into response type
        $responseType->setAccessToken($accessToken);
        $responseType->setRefreshToken($refreshToken);
+        
+        // Revoke used auth code
+        $this->authCodeRepository->revokeAuthCode($authCodePayload->auth_code_id);

        return $responseType;
    }