elsconfairmed started a new conversation+100 XP
2h ago
Passport: escure route against client and authorization grant tokens
After i update passport to 13 i got a 401 on every api route because of the fix "https://github.com/laravel/passport/pull/1901" i was calling with a token generated with client credentials grant
The docu says i should use EnsureClientIsResourceOwner::class and not auth:api, but then i get 401 with every other token.
So is there a way to secure a route for tokens generated with the client credentials grant and or the authorization code grant?
Do i need to write my own solution/revert the changes done to the TokenGuard?