feat: revert password grant in favor of pkce

2026-07-10 12:26:26 +02:00
parent 57a2503da2
commit 2b957e1887
3 changed files with 2 additions and 48 deletions
@@ -3,10 +3,11 @@ league_oauth2_server:
        private_key: '%env(resolve:OAUTH_PRIVATE_KEY)%'
        private_key_passphrase: null
        encryption_key: '%env(resolve:OAUTH_ENCRYPTION_KEY)%'
+        require_code_challenge_for_public_clients: true
        enable_client_credentials_grant: true
        enable_auth_code_grant: true
        enable_refresh_token_grant: true
-        enable_password_grant: true
+        enable_password_grant: false
        access_token_ttl: PT10M
    resource_server:
        public_key: '%env(resolve:OAUTH_PUBLIC_KEY)%'