Require user login before oAuth2 request authorization

[ajgarlag]

See: thephpleague/oauth2-server-bundle#196

After this, the league/oauth2-server-bundle can be upgraded to version 0.9 without any issue.

[krkabol]

Great, I can confirm it!
the issue seems more like a misunderstanding. In my case because I used older examples, in the documentation https://github.com/thephpleague/oauth2-server-bundle/blob/master/docs/index.md it is probably also not ideally stated:

line 26 - users of Flex do not need to follow the next steps - but they have to set { path: ^/authorize, roles: IS_AUTHENTICATED_REMEMEMBERED }

line 142 - "It is recommended" - but for the application to run it is actually "required" ?

---

what is next - do I have to keep this repository, or I can delete it to clean my desk?

thank you very much
Petr

[ajgarlag]

Thanks for the reproducer.

I've just opened a PR to fix documentation issues.

IMO this repository can be deleted.