feat: give client_credentials tokens a one-hour lifetime

2026-09-22 16:56:06 +02:00
parent ab7d00b35d
commit 79709e3a3e
3 changed files with 9 additions and 3 deletions
@@ -4,7 +4,7 @@ league_oauth2_server:
        private_key_passphrase: null
        encryption_key: '%env(resolve:OAUTH_ENCRYPTION_KEY)%'
        require_code_challenge_for_public_clients: true
-        enable_client_credentials_grant: true
+        enable_client_credentials_grant: false
        enable_auth_code_grant: true
        enable_refresh_token_grant: true
        enable_password_grant: false
@@ -382,3 +382,8 @@ services:
                whitelisted_ips: '%env(csv:MAINTENANCE_MODE_IP_WHITELIST)%'
                whitelisted_routes: '%env(csv:MAINTENANCE_MODE_ROUTE_WHITELIST)%'
                whitelisted_paths: '%env(csv:MAINTENANCE_MODE_PATH_WHITELIST)%'
+
+    league.oauth2_server.grant.client_credentials:
+        class: League\OAuth2\Server\Grant\ClientCredentialsGrant
+        tags:
+            - { name: league.oauth2_server.authorization_server.grant, accessTokenTTL: 'PT1H' }