feat: Integrate OAuth2-like scopes and permissions into device flow

Mehrn0ush / RustifyAuth

"Rustify-Auth is a lightweight OAuth 2.0 & 2.1 authorization server in Rust, designed with educational goals in mind. It supports Authorization Code + PKCE, Client Credentials, Refresh Tokens, secure JWT token generation, and Post-Quantum Cryptography (PQC) for enhanced future-proof security.

MIT License

8 stars 4 forks source link

feat: Integrate OAuth2-like scopes and permissions into device flow #31

Closed Mehrn0ush closed 6 days ago

Mehrn0ush commented 6 days ago

Modified DeviceAuthorizationRequest to allow clients to specify requested scopes.
Updated DeviceCode struct to store requested scopes for each device authorization request.
Implemented scope validation in the DeviceToken endpoint to restrict access based on allowed scopes.
Added scope checks during access token generation to ensure tokens are issued with appropriate permissions.
Updated tests to include scenarios for scope validation and access token generation with scopes.