Return access tokens' scopes, not hardcoded list

1 year ago · 7b0a6060b2
parent 2becd273c4
commit 7b0a6060b2
1 changed files with 2 additions and 2 deletions
--- a/app/Auth/BearerTokenResponse.php
+++ b/app/Auth/BearerTokenResponse.php
@ -18,8 +18,8 @@ class BearerTokenResponse extends \League\OAuth2\Server\ResponseTypes\BearerToke
    protected function getExtraParams(AccessTokenEntityInterface $accessToken)
    {
        return [
-        	'created_at' => time(),
-        	'scope' => 'read write follow push'
+            'created_at' => time(),
+            'scope' => implode(' ', $accessToken->getScopes())
        ];
    }
 }