# HG changeset patch # User Kim Alvefur # Date 1677862828 -3600 # Node ID f5a58cbe86e48c6c0f1ea19bc6e3dea7147cb881 # Parent 1733f184e2bb354534a48daa665452b04d402ea8 mod_http_oauth2: Derive scope from correct user details Plausible copypaste mistake diff -r 1733f184e2bb -r f5a58cbe86e4 mod_http_oauth2/mod_http_oauth2.lua --- a/mod_http_oauth2/mod_http_oauth2.lua Fri Mar 03 14:22:05 2023 +0100 +++ b/mod_http_oauth2/mod_http_oauth2.lua Fri Mar 03 18:00:28 2023 +0100 @@ -107,7 +107,8 @@ return oauth_error("invalid_client", "incorrect credentials"); end - local granted_scopes = filter_scopes(client_owner, client_host, params.scope); + local request_username, request_host = jid.split(granted_jid); + local granted_scopes = filter_scopes(request_username, request_host, params.scope); local code = uuid.generate(); local ok = codes:set(params.client_id .. "#" .. code, {