<?php
return [
/*
|--------------------------------------------------------------------------
| Database Connection to use
|--------------------------------------------------------------------------
|
| Set the default database connection to use for the repositories, when
| set to default, it uses whatever connection you specified in your
| laravel database config.
|
*/
'database' => 'default',
/*
|--------------------------------------------------------------------------
| Supported Grant Types
|--------------------------------------------------------------------------
|
| Your OAuth2 Server can issue an access token based on different grant
| types you can even provide your own grant type.
|
| To choose which grant type suits your scenario, see
| http://oauth2.thephpleague.com/authorization-server/which-grant
|
| Please see this link to find available grant types
| http://git.io/vJLAv
|
*/
'grant_types' => [
'password' => [
'class' => '\League\OAuth2\Server\Grant\PasswordGrant',
'callback' => function($email, $password) {
$authManager = app()['auth'];
if (app()["auth"]->once([
"email" => $email,
"password" => $password
])) {
return $authManager->user()->id;
}else {
return false;
}
},
'access_token_ttl' => 3600
],
'refresh_token' => [
'class' => '\League\OAuth2\Server\Grant\RefreshTokenGrant',
'access_token_ttl' => 3600,
'refresh_token_ttl' => 36000
]
],
/*a
|--------------------------------------------------------------------------
| Output Token Type
|--------------------------------------------------------------------------
|
| This will tell the authorization server the output format for the access
| token and the resource server how to parse the access token used.
|
| Default value is League\OAuth2\Server\TokenType\Bearer
|
*/
'token_type' => 'League\OAuth2\Server\TokenType\Bearer',
/*
|--------------------------------------------------------------------------
| State Parameter
|--------------------------------------------------------------------------
|
| Whether or not the state parameter is required in the query string.
|
*/
'state_param' => false,
/*
|--------------------------------------------------------------------------
| Scope Parameter
|--------------------------------------------------------------------------
|
| Whether or not the scope parameter is required in the query string.
|
*/
'scope_param' => false,
/*
|--------------------------------------------------------------------------
| Scope Delimiter
|--------------------------------------------------------------------------
|
| Which character to use to split the scope parameter in the query string.
|
*/
'scope_delimiter' => ',',
/*
|--------------------------------------------------------------------------
| Default Scope
|--------------------------------------------------------------------------
|
| The default scope to use if not present in the query string.
|
*/
'default_scope' => null,
/*
|--------------------------------------------------------------------------
| Access Token TTL
|--------------------------------------------------------------------------
|
| For how long the issued access token is valid (in seconds) this can be
| also set on a per grant-type basis.
|
*/
'access_token_ttl' => 3600,
/*
|--------------------------------------------------------------------------
| Limit clients to specific grants
|--------------------------------------------------------------------------
|
| Whether or not to limit clients to specific grant types. This is useful
| to allow only trusted clients to access your API differently.
|
*/
'limit_clients_to_grants' => false,
/*
|--------------------------------------------------------------------------
| Limit clients to specific scopes
|--------------------------------------------------------------------------
|
| Whether or not to limit clients to specific scopes. This is useful to
| only allow specific clients to use some scopes.
|
*/
'limit_clients_to_scopes' => false,
/*
|--------------------------------------------------------------------------
| Limit scopes to specific grants
|--------------------------------------------------------------------------
|
| Whether or not to limit scopes to specific grants. This is useful to
| allow certain scopes to be used only with certain grant types.
|
*/
'limit_scopes_to_grants' => false,
/*
|--------------------------------------------------------------------------
| HTTP Header Only
|--------------------------------------------------------------------------
|
| This will tell the resource server where to check for the access_token.
| By default it checks both the query string and the http headers.
|
*/
'http_headers_only' => false,
];
|