Allow * tokens

This commit is contained in:
René Preuß
2021-03-31 12:14:08 +02:00
parent 3ba4805e3f
commit 7af00cb7ab
2 changed files with 6 additions and 3 deletions

View File

@@ -137,7 +137,7 @@ class TokenGuard
// is physically logged into the application via the application's interface.
/** @var Authenticatable|HasBitinflowTokens $user */
if ($user = $this->provider->retrieveById($token['sub'])) {
return $user->withBitinflowAccessToken((object)['scopes' => '*']);
return $user->withBitinflowAccessToken((object)['scopes' => ['*']]);
}
return null;

View File

@@ -2,7 +2,6 @@
namespace GhostZero\BitinflowAccounts\Traits;
use Illuminate\Container\Container;
use stdClass;
trait HasBitinflowTokens
@@ -27,11 +26,15 @@ trait HasBitinflowTokens
/**
* Determine if the current API token has a given scope.
*
* @param string $scopeUserProvider
* @param string $scope
* @return bool
*/
public function bitinflowTokenCan(string $scope): bool
{
if (in_array('*', $this->accessToken->scopes)) {
return true;
}
return $this->accessToken ? in_array($scope, $this->accessToken->scopes) : false;
}