We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent c85e24e commit a9502eaCopy full SHA for a9502ea
1 file changed
routers/web/auth/oauth.go
@@ -571,7 +571,15 @@ func GrantApplicationOAuth(ctx *context.Context) {
571
}, form.RedirectURI)
572
return
573
}
574
+ } else if grant.Scope != form.Scope {
575
+ handleAuthorizeError(ctx, AuthorizeError{
576
+ State: form.State,
577
+ ErrorDescription: "a grant exists with different scope",
578
+ ErrorCode: ErrorCodeServerError,
579
+ }, form.RedirectURI)
580
+ return
581
582
+
583
if len(form.Nonce) > 0 {
584
err := grant.SetNonce(ctx, form.Nonce)
585
if err != nil {
0 commit comments