Merge pull request #319 from Fuxy22/patch-1

Fixed missing session scope
thephpleague · Mar 13, 2015 · cf6e86c · cf6e86c
2 parents f6fdbc7 + 7f7f456
commit cf6e86c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/Grant/AuthCodeGrant.php b/src/Grant/AuthCodeGrant.php
@@ -148,7 +148,6 @@ public function newAuthorizeRequest($type, $typeId, $authParams = [])
         $session = new SessionEntity($this->server);
         $session->setOwner($type, $typeId);
         $session->associateClient($authParams['client']);
-        $session->save();
 
         // Create a new auth code
         $authCode = new AuthCodeEntity($this->server);
@@ -158,8 +157,10 @@ public function newAuthorizeRequest($type, $typeId, $authParams = [])
 
         foreach ($authParams['scopes'] as $scope) {
             $authCode->associateScope($scope);
+            $session->associateScope($scope);
         }
 
+        $session->save();
         $authCode->setSession($session);
         $authCode->save();