Scoped oauth

oauth2server/server/verify.go

@@ -1,16 +1,19 @@
 package server
 
 import (
+	"local/router"
 	"net/http"
 )
 
 func (s *Server) verify(w http.ResponseWriter, r *http.Request) {
+	scope := ""
+	router.Params(r, &scope)
 	if r.Method != "POST" {
 		http.NotFound(w, r)
 		return
 	}
 	access := r.FormValue("access")
-	token, ok := s.getToken(access)
+	token, ok := s.getToken(scope, access)
 	if !ok {
 		http.Error(w, "unknown access", http.StatusUnauthorized)
 		return