php - Getting 'unsupported_grant_type' error when implementing a custom OAuth2 grant - Stack Overflow

admin管理员组

文章数量:1321074

I'm trying to implement a custom OAuth2 grant type in Laravel Passport for mobile authentication, but I'm encountering the following error

{
    "error": "unsupported_grant_type",
    "error_description": "The authorization grant type is not supported by the authorization server."
}

Here is the custom MobileGrant class I'm using:

namespace App\Grants;

use App\Enums\UserType;
use Laravel\Passport\Bridge\UserRepository;
use Laravel\Passport\Bridge\RefreshTokenRepository;
use Laravel\Passport\Bridge\AccessToken;
use League\OAuth2\Server\Grant\AbstractGrant;
use League\OAuth2\Server\RequestTypes\AuthorizationRequest;
use League\OAuth2\Server\ResponseTypes\ResponseTypeInterface;
use Psr\Http\Message\ServerRequestInterface;
use DateInterval;
use App\Models\User;
use Carbon\Carbon;
use Illuminate\Support\Facades\Auth;

class MobileGrant extends AbstractGrant
{
    public function __construct(UserRepository $userRepository, RefreshTokenRepository $refreshTokenRepository)
    {
        $this->setUserRepository($userRepository);
        $this->setRefreshTokenRepository($refreshTokenRepository);
    }

    public function respondToAccessTokenRequest(
        ServerRequestInterface $request,
        ResponseTypeInterface $responseType,
        DateInterval $accessTokenTTL
    ) {
        $mobile = $this->getRequestParameter('mobile', $request);
        $confirmCode = $this->getRequestParameter('mobile_confirm_code', $request);

        if (!$mobile || !$confirmCode) {
            return response()->json(['message' => 'Mobile number and confirmation code are required.'], 400);
        }

        $user = User::where('mobile', $mobile)->first();

        if (User::where(['mobile' => $mobile, 'mobile_confirm_code' => $confirmCode])->exists() || $confirmCode == "1234") {
            if (!self::isExpiredConfirmCode($user)) {
                if (User::where(['mobile' => $mobile])->whereNull('mobile_verified_at')->exists()) {
                    User::where('mobile', $mobile)->update([
                        'mobile_verified_at' => Carbon::now()->format('Y-m-d H:i:s')
                    ]);
                }

                Auth::login($user);
                $role = UserType::hasValue($user->role) ? $user->role : null;

                $accessToken = $this->issueAccessToken($accessTokenTTL, $user->id, $role);
                $refreshToken = $this->issueRefreshToken($accessToken);

                return [
                    'token_type' => 'Bearer',
                    'expires_in' => $accessTokenTTL->s,
                    'access_token' => (string) $accessToken,
                    'refresh_token' => (string) $refreshToken,
                ];
            } else {
                return response()->json(['message' => 'Confirmation code expired.'], 400);
            }
        } else {
            return response()->json(['message' => 'Invalid confirmation code.'], 400);
        }
    }

    public function getIdentifier()
    {
        return 'mobile';
    }

    public function isExpiredConfirmCode($user)
    {
        return Carbon::parse($user->expire_mobile_confirm_code)->lt(Carbon::now());
    }
}

In my AppServiceProvider, I enable the custom grant type:

public function boot(): void
{
    app(AuthorizationServer::class)->enableGrantType(
        new MobileGrant(
            app()->make(\Laravel\Passport\Bridge\UserRepository::class),
            app()->make(\Laravel\Passport\Bridge\RefreshTokenRepository::class)
        ),
        new \DateInterval('P1Y') // Access token expiration time
    );
}

However, when I try to request the token with the following data:

{
    "grant_type": "mobile",
    "client_id": "client-id-here",
    "client_secret": "client-secret-here",
    "mobile": "mobileNumber",
    "mobile_confirm_code": "1234",
    "scope": ""
}

I get the unsupported_grant_type error.

Could anyone help me figure out why this error occurs and how to resolve it? I have enabled the custom grant type in AppServiceProvider, but it's still not working.

Thanks in advance!

Getting 'unsupported_grant_type' error when implementing a custom OAuth2 grant in Laravel Passport.

I performed various debugging attempts but couldn't reach a conclusion. I logged the request data within mobileGrant, and the data was coming through correctly. I am also certain that the client ID and client secret information are correct.

 public function respondToAccessTokenRequest(
    ServerRequestInterface $request,
    ResponseTypeInterface $responseType,
    DateInterval $accessTokenTTL
 ) {
    dd($request);
 }

In some documents, it is mentioned that passport::routes() should also be added, but the latest Passport documentation states that it is not necessary.

I'm trying to implement a custom OAuth2 grant type in Laravel Passport for mobile authentication, but I'm encountering the following error

{
    "error": "unsupported_grant_type",
    "error_description": "The authorization grant type is not supported by the authorization server."
}

Here is the custom MobileGrant class I'm using:

namespace App\Grants;

use App\Enums\UserType;
use Laravel\Passport\Bridge\UserRepository;
use Laravel\Passport\Bridge\RefreshTokenRepository;
use Laravel\Passport\Bridge\AccessToken;
use League\OAuth2\Server\Grant\AbstractGrant;
use League\OAuth2\Server\RequestTypes\AuthorizationRequest;
use League\OAuth2\Server\ResponseTypes\ResponseTypeInterface;
use Psr\Http\Message\ServerRequestInterface;
use DateInterval;
use App\Models\User;
use Carbon\Carbon;
use Illuminate\Support\Facades\Auth;

class MobileGrant extends AbstractGrant
{
    public function __construct(UserRepository $userRepository, RefreshTokenRepository $refreshTokenRepository)
    {
        $this->setUserRepository($userRepository);
        $this->setRefreshTokenRepository($refreshTokenRepository);
    }

    public function respondToAccessTokenRequest(
        ServerRequestInterface $request,
        ResponseTypeInterface $responseType,
        DateInterval $accessTokenTTL
    ) {
        $mobile = $this->getRequestParameter('mobile', $request);
        $confirmCode = $this->getRequestParameter('mobile_confirm_code', $request);

        if (!$mobile || !$confirmCode) {
            return response()->json(['message' => 'Mobile number and confirmation code are required.'], 400);
        }

        $user = User::where('mobile', $mobile)->first();

        if (User::where(['mobile' => $mobile, 'mobile_confirm_code' => $confirmCode])->exists() || $confirmCode == "1234") {
            if (!self::isExpiredConfirmCode($user)) {
                if (User::where(['mobile' => $mobile])->whereNull('mobile_verified_at')->exists()) {
                    User::where('mobile', $mobile)->update([
                        'mobile_verified_at' => Carbon::now()->format('Y-m-d H:i:s')
                    ]);
                }

                Auth::login($user);
                $role = UserType::hasValue($user->role) ? $user->role : null;

                $accessToken = $this->issueAccessToken($accessTokenTTL, $user->id, $role);
                $refreshToken = $this->issueRefreshToken($accessToken);

                return [
                    'token_type' => 'Bearer',
                    'expires_in' => $accessTokenTTL->s,
                    'access_token' => (string) $accessToken,
                    'refresh_token' => (string) $refreshToken,
                ];
            } else {
                return response()->json(['message' => 'Confirmation code expired.'], 400);
            }
        } else {
            return response()->json(['message' => 'Invalid confirmation code.'], 400);
        }
    }

    public function getIdentifier()
    {
        return 'mobile';
    }

    public function isExpiredConfirmCode($user)
    {
        return Carbon::parse($user->expire_mobile_confirm_code)->lt(Carbon::now());
    }
}

In my AppServiceProvider, I enable the custom grant type:

public function boot(): void
{
    app(AuthorizationServer::class)->enableGrantType(
        new MobileGrant(
            app()->make(\Laravel\Passport\Bridge\UserRepository::class),
            app()->make(\Laravel\Passport\Bridge\RefreshTokenRepository::class)
        ),
        new \DateInterval('P1Y') // Access token expiration time
    );
}

However, when I try to request the token with the following data:

{
    "grant_type": "mobile",
    "client_id": "client-id-here",
    "client_secret": "client-secret-here",
    "mobile": "mobileNumber",
    "mobile_confirm_code": "1234",
    "scope": ""
}

I get the unsupported_grant_type error.

Could anyone help me figure out why this error occurs and how to resolve it? I have enabled the custom grant type in AppServiceProvider, but it's still not working.

Thanks in advance!

Getting 'unsupported_grant_type' error when implementing a custom OAuth2 grant in Laravel Passport.

I performed various debugging attempts but couldn't reach a conclusion. I logged the request data within mobileGrant, and the data was coming through correctly. I am also certain that the client ID and client secret information are correct.

 public function respondToAccessTokenRequest(
    ServerRequestInterface $request,
    ResponseTypeInterface $responseType,
    DateInterval $accessTokenTTL
 ) {
    dd($request);
 }

In some documents, it is mentioned that passport::routes() should also be added, but the latest Passport documentation states that it is not necessary.

• php
• laravel
• laravel-passport
• laravel-11

Share Improve this question Follow edited Jan 20 at 14:22 kamal gharejeloo asked Jan 17 at 21:03 kamal gharejelookamal gharejeloo 34911 gold badge33 silver badges1414 bronze badges

Add a comment  | 

1 Answer 1

Sorted by: Reset to default 0

If your custom grant type registration happens after Passport has already been booted, it might not take effect.

Can you try moving the grant registration logic to AuthServiceProvider instead of AppServiceProvider.

You should also try refreshing your cache and config.

php artisan cache:clear
php artisan config:clear
php artisan config:cache

本文标签： phpGetting 39unsupportedgranttype39 error when implementing a custom OAuth2 grantStack Overflow