thephpleague / oauth2-server

A spec compliant, secure by default PHP OAuth 2.0 Server
https://oauth2.thephpleague.com
MIT License
6.52k stars 1.12k forks source link

Fix the issue when client id is a number but in the refresh token it'… #1217

Closed dmytro-skelia closed 3 years ago

dmytro-skelia commented 3 years ago

In case if $refreshTokenData['client_id'] = 22 and $clientId = "22" it breaks. This is not an edge case. I faced this issue in Laravel 5.6, that uses Zend Framework to handle the request.

Sephster commented 3 years ago

@dmytro-skelia - have you looked into why your refresh token client ID is being decrypted as a number? If it is encrypted as a string, it should be returned as a string. I would anticipate that if this issue was widespread, we would have a lot more issues raised regarding this.

Sephster commented 3 years ago

Closing this because of a lack of response from @dmytro-skelia - will reopen if I get a reply.