Passport 13.0 permissions are not correct, recommend changing to 600 or 660 instead of 777

[hihuangwei]

Passport Version

13.0

Laravel Version

12.18

PHP Version

8.2.0

Database Driver & Version

No response

Description

permissions are not correct, recommend changing to 600 or 660 instead of 777

Steps To Reproduce

How to ignore this error in the development environment

[hafezdivandari]

You may:

• Change the key files permissions (recommended):

  chmod(Passport::keyPath('oauth-public.key'), 0660);
  chmod(Passport::keyPath('oauth-private.key'), 0600);
  

• Or disable this feature from the boot method of your application's App\Providers\AppServiceProvider class::

  Passport::$validateKeyPermissions = false;
  

[crynobone]

@hafezdivandari I did check the code, any idea why chmod is ignored for Windows environment?

[hafezdivandari]

@crynobone this is not for Windows, because the possible file permissions on Windows are '777', '666', and '444' only and anything else will be ignored!

• Fix key files permission on Windows thephpleague/oauth2-server#1447
• [13.x] Validate key files' permissions #1789