feat: gate oauth2 authorization on per-client roles

2026-09-23 13:46:56 +02:00
parent 79709e3a3e
commit cc3d32fcbb
6 changed files with 436 additions and 11 deletions
@@ -19,6 +19,9 @@ league_oauth2_server:
        doctrine: null
    client:
        allow_plaintext_secrets: false
+        # App\Entity\OAuth2Client adds the required_roles column that
+        # App\EventListener\AuthorizationCodeListener gates authorization on.
+        classname: App\Entity\OAuth2Client

 when@test:
    league_oauth2_server: