From 7af00cb7ab1450974c02cdc70bdf44f289922b69 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ren=C3=A9=20Preu=C3=9F?= <rene@preuss.io>
Date: Wed, 31 Mar 2021 12:14:08 +0200
Subject: [PATCH] Allow * tokens

---
 src/GhostZero/BitinflowAccounts/Auth/TokenGuard.php        | 2 +-
 .../BitinflowAccounts/Traits/HasBitinflowTokens.php        | 7 +++++--
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/src/GhostZero/BitinflowAccounts/Auth/TokenGuard.php b/src/GhostZero/BitinflowAccounts/Auth/TokenGuard.php
index 9778839..b153ac2 100644
--- a/src/GhostZero/BitinflowAccounts/Auth/TokenGuard.php
+++ b/src/GhostZero/BitinflowAccounts/Auth/TokenGuard.php
@@ -137,7 +137,7 @@ class TokenGuard
         // is physically logged into the application via the application's interface.
         /** @var Authenticatable|HasBitinflowTokens $user */
         if ($user = $this->provider->retrieveById($token['sub'])) {
-            return $user->withBitinflowAccessToken((object)['scopes' => '*']);
+            return $user->withBitinflowAccessToken((object)['scopes' => ['*']]);
         }
 
         return null;
diff --git a/src/GhostZero/BitinflowAccounts/Traits/HasBitinflowTokens.php b/src/GhostZero/BitinflowAccounts/Traits/HasBitinflowTokens.php
index 76a40b1..08caed7 100644
--- a/src/GhostZero/BitinflowAccounts/Traits/HasBitinflowTokens.php
+++ b/src/GhostZero/BitinflowAccounts/Traits/HasBitinflowTokens.php
@@ -2,7 +2,6 @@
 
 namespace GhostZero\BitinflowAccounts\Traits;
 
-use Illuminate\Container\Container;
 use stdClass;
 
 trait HasBitinflowTokens
@@ -27,11 +26,15 @@ trait HasBitinflowTokens
     /**
      * Determine if the current API token has a given scope.
      *
-     * @param string $scopeUserProvider
+     * @param string $scope
      * @return bool
      */
     public function bitinflowTokenCan(string $scope): bool
     {
+        if (in_array('*', $this->accessToken->scopes)) {
+            return true;
+        }
+
         return $this->accessToken ? in_array($scope, $this->accessToken->scopes) : false;
     }