3
0
Fork 0
mirror of https://github.com/farmOS/farmOS.git synced 2024-02-23 11:37:38 +01:00

Do not enable the client_credentials grant, client secret by default. This value cannot be made public.

This commit is contained in:
paul121 2020-01-23 15:00:54 -08:00 committed by Michael Stenta
parent d3f622af55
commit 7a9535c74e

View file

@ -143,7 +143,6 @@ function farm_api_oauth_enable(){
'require_exact_redirect_uri' => TRUE,
'grant_types' => array(
'authorization_code' => 'authorization_code',
'client_credentials' => 'client_credentials',
'refresh_token' => 'refresh_token',
'password' => 'password',
),
@ -173,7 +172,6 @@ function farm_api_oauth_enable(){
$client->server = $server->name;
$client->label = 'farmOS API';
$client->client_key = 'farmos_api_client';
$client->client_secret = oauth2_server_hash_client_secret('client_secret');
// The module supports entering multiple redirect uris separated by a
// newline. Both a dummy and the real uri are specified to confirm that
// validation passes.