Wrong Scope filled in the response for token request grant_type : "authorization_code"

[gailu]

I believe scope returned should be $authCode->scope instead of $this->scope. Response is returned with null scope whereas Authorization Code table has valid scope

`--- a/vendor/conquer/oauth2/granttypes/Authorization.php +++ b/vendor/conquer/oauth2/granttypes/Authorization.php @@ -105,7 +105,7 @@ class Authorization extends BaseModel 'access_token' => $acessToken->access_token, 'expires_in' => $this->accessTokenLifetime, 'token_type' => $this->tokenType,

•        'scope' => $this->scope,
  

•        'scope' => $authCode->scope,
         'refresh_token' => $refreshToken->refresh_token,
     ];
  

  }`

[borodulin]

https://tools.ietf.org/html/rfc6749#section-3.3 This functionality requires further development. There must be user callback, for the possibility of implementing server-side business logic. I think, the default implementation should be returning intersections of authCode.scope and accessToken.scope.