feat: give client_credentials tokens a one-hour lifetime

2026-09-22 16:56:06 +02:00
parent ab7d00b35d
commit 79709e3a3e
3 changed files with 9 additions and 3 deletions
@@ -4,7 +4,7 @@ league_oauth2_server:
        private_key_passphrase: null
        encryption_key: '%env(resolve:OAUTH_ENCRYPTION_KEY)%'
        require_code_challenge_for_public_clients: true
-        enable_client_credentials_grant: true
+        enable_client_credentials_grant: false
        enable_auth_code_grant: true
        enable_refresh_token_grant: true
        enable_password_grant: false