allow grant type 'refresh_token' as well, fixes #2507

Closes #2507

Merge request studip/studip!1694

1 files changed, 2 insertions, 1 deletions

diff --git a/lib/classes/OAuth2/Bridge/ClientRepository.php b/lib/classes/OAuth2/Bridge/ClientRepository.php
index b6fd4f6..526e839 100644
--- a/lib/classes/OAuth2/Bridge/ClientRepository.php
+++ b/lib/classes/OAuth2/Bridge/ClientRepository.php
@@ -37,9 +37,10 @@ class ClientRepository implements ClientRepositoryInterface
      */
     public function validateClient($clientIdentifier, $clientSecret, $grantType): bool
     {
-        if ($grantType !== 'authorization_code') {
+        if (!in_array($grantType, ['authorization_code', 'refresh_token'])) {
             return false;
         }
+
         $client = Client::findActive($clientIdentifier);
         if (!$client) {
             return false;