Closed yunwuxin closed 2 years ago
Not at the moment. We haven't opened this up, primarily because the way it functions is specified in the OAuth 2 specs and we try to be spec compliant. Is there something you can't do with the current set up?
In my project, i only want to check domain name only,not the whole redirect uri
The library used to work in this way but we changed it to better comply with OAuth 2 standards as partial matching is a security risk. For that reason, we won't be opening this up for editing sorry.
https://github.com/thephpleague/oauth2-server/blob/19dc5e47c465bc9f1804859660b7efe456a40713/src/Grant/AbstractGrant.php#L282-L292