jjkiers/cloudron-box
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Set the scope for a token basedon what the user has access to

Browse Source
This commit is contained in:
Girish Ramakrishnan
2018-04-30 21:21:18 -07:00
parent 1432d90f37
commit 9789966017
3 changed files with 18 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/routes/oauth2.js
+4 -2
View File
@@ -19,7 +19,8 @@ exports = module.exports = {
csrf: csrf
};
var apps = require('../apps.js'),
var accesscontrol = require('../accesscontrol.js'),
apps = require('../apps.js'),
assert = require('assert'),
authcodedb = require('../authcodedb.js'),
clients = require('../clients'),
@@ -103,8 +104,9 @@ function initialize() {
var token = tokendb.generateToken();
var expires = Date.now() + constants.DEFAULT_TOKEN_EXPIRATION;
var scope = accesscontrol.normalizeScope(client.scope, user.scope);
tokendb.add(token, user.id, client.id, expires, client.scope, function (error) {
tokendb.add(token, user.id, client.id, expires, scope, function (error) {
if (error) return callback(error);
debug('grant token: new access token for client %s token %s', client.id, token);