@quarks/quarks-iam/oidc/determineClientScope.js

A modern authorization server built to authenticate your users and protect your APIs

/**
 * Module dependencies
 */

var Scope = require('../models/Scope')

/**
 * Determine client scope
 */

function determineClientScope (req, res, next) {
  var params = req.connectParams
  var subject = req.client
  var scope = params.scope || subject.default_client_scope

  if (params.grant_type === 'client_credentials') {
    Scope.determine(scope, subject, function (err, scope, scopes) {
      if (err) { return next(err) }
      req.scope = scope
      req.scopes = scopes
      next()
    })
  } else {
    next()
  }
}

/**
 * Exports
 */

module.exports = determineClientScope