thephpleague / oauth2-server

A spec compliant, secure by default PHP OAuth 2.0 Server
https://oauth2.thephpleague.com
MIT License
6.53k stars 1.11k forks source link

Revert Enforcing of Client Redirect URI #1169

Closed Sephster closed 3 years ago

Sephster commented 3 years ago

This PR reinstates the ability to have a client that does not have a pre-registered redirect uri. This change was originally put in place to support RFC 6819 and the upcoming OAuth 2.1 spec. However, it is preventing people from using the client credentials grant.

Because this is a behaviour change and the package has been behaving in the manner for some time, we are reinstating this behaviour and will push the change to v9 instead.

This PR fixes issues raised by developers in issue #1161