mirror of
				https://github.com/elyby/oauth2-server.git
				synced 2025-05-31 14:12:07 +05:30 
			
		
		
		
	Merge pull request #547 from lookyman/scope-fixes
Fix scope loading in grants
This commit is contained in:
		@@ -215,7 +215,7 @@ abstract class AbstractGrant implements GrantTypeInterface
 | 
			
		||||
        foreach ($scopesList as $scopeItem) {
 | 
			
		||||
            $scope = $this->scopeRepository->getScopeEntityByIdentifier($scopeItem);
 | 
			
		||||
 | 
			
		||||
            if (($scope instanceof ScopeEntityInterface) === false) {
 | 
			
		||||
            if (!$scope instanceof ScopeEntityInterface) {
 | 
			
		||||
                throw OAuthServerException::invalidScope($scopeItem, $redirectUri);
 | 
			
		||||
            }
 | 
			
		||||
 | 
			
		||||
 
 | 
			
		||||
@@ -11,6 +11,7 @@ namespace League\OAuth2\Server\Grant;
 | 
			
		||||
 | 
			
		||||
use DateInterval;
 | 
			
		||||
use League\OAuth2\Server\Entities\ClientEntityInterface;
 | 
			
		||||
use League\OAuth2\Server\Entities\ScopeEntityInterface;
 | 
			
		||||
use League\OAuth2\Server\Entities\UserEntityInterface;
 | 
			
		||||
use League\OAuth2\Server\Exception\OAuthServerException;
 | 
			
		||||
use League\OAuth2\Server\Repositories\AuthCodeRepositoryInterface;
 | 
			
		||||
@@ -97,7 +98,7 @@ class AuthCodeGrant extends AbstractAuthorizeGrant
 | 
			
		||||
            foreach ($authCodePayload->scopes as $scopeId) {
 | 
			
		||||
                $scope = $this->scopeRepository->getScopeEntityByIdentifier($scopeId);
 | 
			
		||||
 | 
			
		||||
                if ($scope === false) {
 | 
			
		||||
                if (!$scope instanceof ScopeEntityInterface) {
 | 
			
		||||
                    // @codeCoverageIgnoreStart
 | 
			
		||||
                    throw OAuthServerException::invalidScope($scopeId);
 | 
			
		||||
                    // @codeCoverageIgnoreEnd
 | 
			
		||||
 
 | 
			
		||||
@@ -10,6 +10,7 @@
 | 
			
		||||
 */
 | 
			
		||||
namespace League\OAuth2\Server\Grant;
 | 
			
		||||
 | 
			
		||||
use League\OAuth2\Server\Entities\ScopeEntityInterface;
 | 
			
		||||
use League\OAuth2\Server\Exception\OAuthServerException;
 | 
			
		||||
use League\OAuth2\Server\Repositories\RefreshTokenRepositoryInterface;
 | 
			
		||||
use League\OAuth2\Server\RequestEvent;
 | 
			
		||||
@@ -49,7 +50,7 @@ class RefreshTokenGrant extends AbstractGrant
 | 
			
		||||
            $scopes = array_map(function ($scopeId) use ($client) {
 | 
			
		||||
                $scope = $this->scopeRepository->getScopeEntityByIdentifier($scopeId);
 | 
			
		||||
 | 
			
		||||
                if (!$scope) {
 | 
			
		||||
                if (!$scope instanceof ScopeEntityInterface) {
 | 
			
		||||
                    // @codeCoverageIgnoreStart
 | 
			
		||||
                    throw OAuthServerException::invalidScope($scopeId);
 | 
			
		||||
                    // @codeCoverageIgnoreEnd
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user