Repository navigation
Tried to implement grant_type = client_credentials .. not working v6.0 #429
Description
Bug Report
after migration and applying fixture i had to change the
src\Core\src\Security\src\Entity\OAuthAccessToken.php
#[ORM\Column(name: 'user_id', type: 'string', length: 25, nullable: true)]
private ?string $userId;
To
#[ORM\Column(name: 'user_id', type: 'string', length: 25, nullable: true)]
private ?string $userId=null;
i was able to generate access token but when i tried to access endpoint with bearer token it gave
{
"error": {
"messages": [
"User not found."
]
}
}
and problem was coming because of issue in verification of token .. issue goes if i passed exact jwt token in token column of oauth_access_tokens..
Summary
Current behavior
unable to get "grant_type": "client_credentials", not working out of the box
Activity
alexmerlin commentedon Jun 23, 2025
Thanks @fmangat!
The issue you encountered is caused by not using the recommended
grant_type=passwordwhich makes sure that a user/admin will authenticate using an identity+password combination. Once the user is matched, the identity gets stored into theuser_idyou mentioned, so it will never benullfor successful authentications.We built Dotkernel API on the above scenario.
In your case, using a different
grant_typefollows a different auth flow, causing theuser_idcolumn not getting populated, hence the message User not found.Is using
grant_type=client_credentialsa requirement in your app?fmangat commentedon Jun 23, 2025
DOTKERNEL API should support all grant Types available in oAUTH2.0 , yes grant_type=client_credentials is a requirement.. also please confirm if grant_type = code is working fine for version 6.0
arhimede commentedon Jun 24, 2025
@fmangat
In the past 7 years, we used only
grant_type=password, that's why all othergrant_typesare not tested.I am not sure if there is a demand for implementing other
grant_typestoo, probably depends of the business case.I am transforming now this issue in discussion, in order to collect feedback from other user too