From fc0245fe4448508cac268b1102f8beabd7d85374 Mon Sep 17 00:00:00 2001 From: Andrey Sidorov Date: Tue, 24 Sep 2019 15:46:47 +0300 Subject: [PATCH] do not check default scopes Do not pass `::Doorkeeper.configuration.default_scopes` in `token.acceptable?`. This logic is completely broken when `::Doorkeeper.configuration.default_scopes != []` --- lib/devise/strategies/doorkeeper.rb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/lib/devise/strategies/doorkeeper.rb b/lib/devise/strategies/doorkeeper.rb index 235e115..065933b 100644 --- a/lib/devise/strategies/doorkeeper.rb +++ b/lib/devise/strategies/doorkeeper.rb @@ -43,8 +43,7 @@ def clean_up_csrf? def resource_from_token token = ::Doorkeeper.authenticate(request) - scopes = ::Doorkeeper.configuration.default_scopes - invalid_token unless token && token.acceptable?(scopes) + invalid_token unless token && token.acceptable?([]) mapping.to.find(token.resource_owner_id) end