Scope

[ghost]

Add use scope

[thomseddon]

Good shout, +1

[mjsalinger]

+1 on this

[toddpi314]

+1

[ghost]

+1

[ftrianakast]

+1

[Webdesignwill]

+1

[cadecairos]

I'd love to see this get implemented, I'll even do the work for you!

@thomseddon Is there a specific way you'd like this to get implemented?

[jamiemccrindle]

+1

[jasonfutch]

+1

[JFKingsley]

+1

[thomseddon]

Happy to accept a PR on this, this could either be an extra param on things like getAccessToken or with a specific model function checkScope....also happy to discuss more before PR :)

[mjsalinger]

Thoughts on implementation -

• An additional (optional) callback function in authCodeGrant validateScope, which passes the scope from the request and returns the user-granted scope.
• If scope is included as part of the authCodeGrant request, the results of validateScopeScope are saved along with the auth grant.
• When requesting a token, scope can be validated via a model definition 'getScope'
• The granted scope is returned in the access token response if it was included anywhere in the request chain

[lfk]

Submitted PR #149 for review.

[mjsalinger]

Scope has been implemented in the new PR #203. Closing to clean up the issues.