Implementing Laravel passport for oAuth and internal authentication

[ahmedmoloude]

hi, guys how are you doing? , I am trying to implement Passport in my app to communicate with other apps securely without the need of my users to provide their password and all that jam but I have some questions and I didn't find a good answer online.

• how to authenticate my users in my app locally and give them access and refresh tokens back without creating a new client and without using create token that the user model provide , right now what i am doing is calling OAuth API with password as garnet type but I don't know if that's is the god way
• how to define scopes for clients when they are created because I don't find it safe to let the client choose his scope without having control over it