IcyNet.eu/server/api/oauth2/controller/tokens/clientCredentials.js

import { ServerError, InvalidScope } from '../../error'

export async function clientCredentials (oauth2, client, wantScope) {
  let scope = null

  const resObj = {
    token_type: 'bearer'
  }

  scope = oauth2.model.client.transformScope(wantScope)
  scope = oauth2.model.client.checkScope(client, scope)

  if (!scope) {
    throw new InvalidScope('Client does not allow access to this scope')
  }

  console.debug('Scope check passed ', scope)

  try {
    resObj.access_token = await oauth2.model.accessToken.create(null, oauth2.model.client.getId(client),
      scope, oauth2.model.accessToken.ttl)
  } catch (err) {
    throw new ServerError('Failed to call accessToken.create function')
  }

  resObj.expires_in = oauth2.model.accessToken.ttl

  return resObj
}