Merge pull request #14 from okazy/fix/enable-authorization-code-only

Grant を authorization code / refresh token grant に制限

Resource/config/services.yaml

@@ -10,6 +10,21 @@ trikoder_oauth2:
         private_key_passphrase: null
         encryption_key: '%env(ECCUBE_OAUTH2_ENCRYPTION_KEY)%'
 
+      # Whether to enable the client credentials grant
+        enable_client_credentials_grant: false
+
+      # Whether to enable the password grant
+        enable_password_grant: false
+
+      # Whether to enable the refresh token grant
+        enable_refresh_token_grant: true
+
+      # Whether to enable the authorization code grant
+        enable_auth_code_grant: true
+
+      # Whether to enable the implicit grant
+        enable_implicit_grant: false
+
     resource_server:
         public_key: '%env(ECCUBE_OAUTH2_RESOURCE_SERVER_PUBLIC_KEY)%'