Oauth2 Server allows passing a custom authorization validator (instance of AuthorizationValidatorInterface) to the constructor of ResourceServer class or pass null to use the default BearerTokenValidator.
Devs usually override BearerTokenValidator class to add additional params to the request when validating the token with custom claims, e.g. as this PR intends to make this easier:
Oauth2 Server allows passing a custom authorization validator (instance of
AuthorizationValidatorInterface
) to the constructor ofResourceServer
class or passnull
to use the defaultBearerTokenValidator
.Devs usually override
BearerTokenValidator
class to add additional params to the request when validating the token with custom claims, e.g. as this PR intends to make this easier:Or as mentioned here:
This PR allows using custom authorization validator.