Skip to content

Commit 8c7f069

Browse files
authored
Client credentials middleware should allow any valid client
Last december a change was made to allow any valid client : Based on the theory and official standards of OAuth2: "The Client Credentials grant is used when applications request an access token to access their own resources, not on behalf of a user." (REF1, REF2). Shouldn't this change be persistant ? (taylorotwell merged commit on 5 Dec 2019) Ref laravel#1125 laravel#1132
1 parent 6896a17 commit 8c7f069

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/Http/Middleware/CheckClientCredentials.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ class CheckClientCredentials extends CheckCredentials
1717
*/
1818
protected function validateCredentials($token)
1919
{
20-
if (! $token || ! $token->client || $token->client->firstParty()) {
20+
if (! $token) {
2121
throw new AuthenticationException;
2222
}
2323
}

0 commit comments

Comments
 (0)