<?php 
 
return [ 
 
    /* 
    |-------------------------------------------------------------------------- 
    | Database Connection to use 
    |-------------------------------------------------------------------------- 
    | 
    | Set the default database connection to use for the repositories, when 
    | set to default, it uses whatever connection you specified in your 
    | laravel database config. 
    | 
    */ 
 
    'database' => 'default', 
 
    /* 
    |-------------------------------------------------------------------------- 
    | Supported Grant Types 
    |-------------------------------------------------------------------------- 
    | 
    | Your OAuth2 Server can issue an access token based on different grant 
    | types you can even provide your own grant type. 
    | 
    | To choose which grant type suits your scenario, see 
    | http://oauth2.thephpleague.com/authorization-server/which-grant 
    | 
    | Please see this link to find available grant types 
    | http://git.io/vJLAv 
    | 
    */ 
 
    'grant_types' => [ 
        'password' => [ 
            'class' => '\League\OAuth2\Server\Grant\PasswordGrant', 
            'callback' => function($email, $password) { 
 
                $authManager = app()['auth']; 
 
                if (app()["auth"]->once([ 
                    "email" => $email, 
                    "password" => $password 
                ])) { 
                    return $authManager->user()->id; 
                }else { 
                    return false; 
                } 
            }, 
            'access_token_ttl' => 3600 
        ], 
        'refresh_token' => [ 
            'class' => '\League\OAuth2\Server\Grant\RefreshTokenGrant', 
            'access_token_ttl' => 3600, 
            'refresh_token_ttl' => 36000 
        ] 
    ], 
 
    /*a 
    |-------------------------------------------------------------------------- 
    | Output Token Type 
    |-------------------------------------------------------------------------- 
    | 
    | This will tell the authorization server the output format for the access 
    | token and the resource server how to parse the access token used. 
    | 
    | Default value is League\OAuth2\Server\TokenType\Bearer 
    | 
    */ 
 
    'token_type' => 'League\OAuth2\Server\TokenType\Bearer', 
 
    /* 
    |-------------------------------------------------------------------------- 
    | State Parameter 
    |-------------------------------------------------------------------------- 
    | 
    | Whether or not the state parameter is required in the query string. 
    | 
    */ 
 
    'state_param' => false, 
 
    /* 
    |-------------------------------------------------------------------------- 
    | Scope Parameter 
    |-------------------------------------------------------------------------- 
    | 
    | Whether or not the scope parameter is required in the query string. 
    | 
    */ 
 
    'scope_param' => false, 
 
    /* 
    |-------------------------------------------------------------------------- 
    | Scope Delimiter 
    |-------------------------------------------------------------------------- 
    | 
    | Which character to use to split the scope parameter in the query string. 
    | 
    */ 
 
    'scope_delimiter' => ',', 
 
    /* 
    |-------------------------------------------------------------------------- 
    | Default Scope 
    |-------------------------------------------------------------------------- 
    | 
    | The default scope to use if not present in the query string. 
    | 
    */ 
 
    'default_scope' => null, 
 
    /* 
    |-------------------------------------------------------------------------- 
    | Access Token TTL 
    |-------------------------------------------------------------------------- 
    | 
    | For how long the issued access token is valid (in seconds) this can be 
    | also set on a per grant-type basis. 
    | 
    */ 
 
    'access_token_ttl' => 3600, 
 
    /* 
    |-------------------------------------------------------------------------- 
    | Limit clients to specific grants 
    |-------------------------------------------------------------------------- 
    | 
    | Whether or not to limit clients to specific grant types. This is useful 
    | to allow only trusted clients to access your API differently. 
    | 
    */ 
 
    'limit_clients_to_grants' => false, 
 
    /* 
    |-------------------------------------------------------------------------- 
    | Limit clients to specific scopes 
    |-------------------------------------------------------------------------- 
    | 
    | Whether or not to limit clients to specific scopes. This is useful to 
    | only allow specific clients to use some scopes. 
    | 
    */ 
 
    'limit_clients_to_scopes' => false, 
 
    /* 
    |-------------------------------------------------------------------------- 
    | Limit scopes to specific grants 
    |-------------------------------------------------------------------------- 
    | 
    | Whether or not to limit scopes to specific grants. This is useful to 
    | allow certain scopes to be used only with certain grant types. 
    | 
    */ 
 
    'limit_scopes_to_grants' => false, 
 
    /* 
    |-------------------------------------------------------------------------- 
    | HTTP Header Only 
    |-------------------------------------------------------------------------- 
    | 
    | This will tell the resource server where to check for the access_token. 
    | By default it checks both the query string and the http headers. 
    | 
    */ 
 
    'http_headers_only' => false, 
 
]; 
 
 |