Level 54
I'm pretty certain the answer is no, that scope is baked into the token, and to change it/set a new scope you'd need to generate a fresh token with the new scope.
1 like
Jun 12, 2022
7
Level 9
Laravel Passport Token Scope
Is there a way to change scope of a generated password grant token
Password grant token generated:
Http::asForm()->post(env('PASSPORT_ISSUE_TOKEN_URL'), [
'grant_type' => 'password',
'client_id' => env('PASSPORT.PASSWORD_GRANT_CLIENT_ID'),
'client_secret' => config('PASSPORT.PASSWORD_GRANT_CLIENT_SECRET'),
'username' => $request->input('email'),
'password' => $request->input('password'),
'scope' => 'view-post'
])
I want to change the scope after a user do some action
Level 80
@presmelito No. And you shouldn’t really be using password grant clients, and you definitely shouldn’t be using the env helper in code
1 like
Level 9
@martinbean Why we should not use password grant could you explain further? Thanks for pointing that env stuff.
Level 80
@Presmelito Because the latest OAuth spec disallows it due to security issues: https://oauth.net/2/grant-types/password/
The latest OAuth 2.0 Security Best Current Practice disallows the password grant entirely.
1 like
Level 9
@martinbean @willvincent Thank you for responding
This is what I did when the user hit the endpoint where I want to alter their token scope
$token = Auth::user()->token();
$token->scopes = ['view-post','write-post']
$token->save();
Is this a bad idea? if so why?
Level 80
@presmelito Yes, it’s a bad idea. You should be issuing new tokens with the new scopes; not trying to modify already-issued tokens.
Revoke the old token, and issue a new token with the desired scopes.
2 likes
Level 75
@Presmelito also here: https://laravel.com/docs/9.x/passport#introduction
There is a paragraph with an exclamation point. There is a link to:
Which in turn has a lot of information. It is highly advised to study this material.
I also suggest to click the various links and look over the specifications.
2 likes
Please or to participate in this conversation.