Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

elsconfairmed's avatar

elsconfairmed started a new conversation+100 XP

2h ago

Passport: escure route against client and authorization grant tokens

After i update passport to 13 i got a 401 on every api route because of the fix "https://github.com/laravel/passport/pull/1901" i was calling with a token generated with client credentials grant

The docu says i should use EnsureClientIsResourceOwner::class and not auth:api, but then i get 401 with every other token.

So is there a way to secure a route for tokens generated with the client credentials grant and or the authorization code grant?

Do i need to write my own solution/revert the changes done to the TokenGuard?