Pass user id from old refresh token to finalizeScopes()

thephpleague / oauth2-server

A spec compliant, secure by default PHP OAuth 2.0 Server

https://oauth2.thephpleague.com

MIT License

6.49k stars 1.12k forks source link

Pass user id from old refresh token to finalizeScopes() #1414

Open pl-github opened 3 weeks ago

pl-github commented 3 weeks ago

We need the user ID in our finalizeScopes() implementation to adjust the selection of scopes. As of version 9.0, the finalizeScopes() method is also called for the RefreshTokenGrant, but the user ID is not currently passed to the finalizeScopes() method. Since the user ID is in the old refresh token, it can be passed from there.