32a1994a5e
A refresh request must fail if it asks for scopes that were not originally granted when the refresh token was obtained. This Commit: * changes repo to store scopes with tokens * changes repo interface signatures so that scopes can be stored and verified * updates dependent code to pass along scopes |
||
|---|---|---|
| .. | ||
| 0001_initial_migration.sql | ||
| 0002_dex_admin.sql | ||
| 0003_user_created_at.sql | ||
| 0004_session_nonce.sql | ||
| 0005_refresh_token_create.sql | ||
| 0006_user_email_unique.sql | ||
| 0007_session_scope.sql | ||
| 0008_users_active_or_inactive.sql | ||
| 0009_key_not_primary_key.sql | ||
| 0010_client_metadata_field_changed.sql | ||
| 0011_case_insensitive_emails.sql | ||
| 0012_add_cross_client_authorizers.sql | ||
| 0013_add_scopes_to_refresh_tokens.sql | ||
| assets.go | ||
| gen_assets.go | ||
| migrations.go | ||