Merge pull request #949 from philcross/fix_client_credentials_superuser_scope

[7.0] Allow '*' scope to be used with Client Credentials

Author: taylorotwell

src/Bridge/ScopeRepository.php

@@ -25,7 +25,7 @@ public function finalizeScopes(
         array $scopes, $grantType,
         ClientEntityInterface $clientEntity, $userIdentifier = null)
     {
-        if (! in_array($grantType, ['password', 'personal_access'])) {
+        if (! in_array($grantType, ['password', 'personal_access', 'client_credentials'])) {
             $scopes = collect($scopes)->reject(function ($scope) {
                 return trim($scope->getIdentifier()) === '*';
             })->values()->all();

tests/BridgeScopeRepositoryTest.php

@@ -34,7 +34,7 @@ public function test_superuser_scope_cant_be_applied_if_wrong_grant()
         $repository = new ScopeRepository;
 
         $scopes = $repository->finalizeScopes(
-            [$scope1 = new Scope('*')], 'client_credentials', new Client('id', 'name', 'http://localhost'), 1
+            [$scope1 = new Scope('*')], 'refresh_token', new Client('id', 'name', 'http://localhost'), 1
         );
 
         $this->assertEquals([], $scopes);