Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Grant を authorization code / refresh token grant に制限 #14

Merged
merged 1 commit into from
Jul 7, 2020

Conversation

okazy
Copy link
Contributor

@okazy okazy commented Jul 7, 2020

Grant を authorization code / refresh token grant に制限しました。

手元の API クライアントで Grant が制限されていることを確認しています。

image

image

有効な Grant

  • authorization code grant
  • refresh token grant

無効な Grant

  • client credentials grant
  • password grant
  • implicit grant

その他

trikoder/oauth2-bundle の 3.x 以降で code challenge for public clients が利用できるようです。
ただ、 Symfony 4.4 以上でしか動かないようですので EC-CUBE 4.1 で期待です。。。

https://github.com/trikoder/oauth2-bundle

@okazy okazy added this to the 1.0 milestone Jul 7, 2020
@okazy okazy added the enhancement New feature or request label Jul 7, 2020
@kiy0taka kiy0taka merged commit caa018f into EC-CUBE:master Jul 7, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants