payprop / net-oauth2-authorizationserver

Module to implement core functions of an OAuth2 authorization server
7 stars 10 forks source link

confirm_by_resource_owner should return scopes #6

Closed mrenvoize closed 7 years ago

mrenvoize commented 7 years ago

It's possible for the resource owner to allow access, but restrict the scopes (thus modifying the scopes from that of the original request). To account for this we should update the subroutine signature to pass back the updated scopes ref.