fix(#392): avoid to send optional empty scope in a client credentials…

… grant
jumbojett · Oct 10, 2023 · fea9484 · fea9484
1 parent 5d69bcf
commit fea9484
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/src/OpenIDConnectClient.php b/src/OpenIDConnectClient.php
@@ -810,9 +810,12 @@ public function requestClientCredentialsToken() {
         $post_data = [
             'grant_type'    => $grant_type,
             'client_id'     => $this->clientID,
-            'client_secret' => $this->clientSecret,
-            'scope'         => implode(' ', $this->scopes)
+            'client_secret' => $this->clientSecret
         ];
+
+        if ($this->scopes) {
+            $post_data['scope'] = implode(' ', $this->scopes);
+        }
 
         // Convert token params to string format
         $post_params = http_build_query($post_data, '', '&', $this->encType);