feat: give client_credentials tokens a one-hour lifetime

2026-09-22 16:56:06 +02:00
parent ab7d00b35d
commit 79709e3a3e
3 changed files with 9 additions and 3 deletions
@@ -382,3 +382,8 @@ services:
                whitelisted_ips: '%env(csv:MAINTENANCE_MODE_IP_WHITELIST)%'
                whitelisted_routes: '%env(csv:MAINTENANCE_MODE_ROUTE_WHITELIST)%'
                whitelisted_paths: '%env(csv:MAINTENANCE_MODE_PATH_WHITELIST)%'
+
+    league.oauth2_server.grant.client_credentials:
+        class: League\OAuth2\Server\Grant\ClientCredentialsGrant
+        tags:
+            - { name: league.oauth2_server.authorization_server.grant, accessTokenTTL: 'PT1H' }