[13.x] Improve performance, fix minor bugs, and add tests

[hafezdivandari]

This PR does:

• Implement the Arrayable, Jsonable, and JsonSerializable interfaces on the AccessToken class and fix some minor issues.
• Move repeated logic for determining scope existence to the ResolvesInheritedScopes trait by introducing a new scopeExists method, used in both the AccessToken and Client classes.
• Fix a bug when empty scopes was causing authorization to skip and add tests for this.
• Drop support for Laravel 10 and PHP 8.1.
• Make the ClientRepository class a singleton and leverages the new Laravel 11 once function, avoids duplicate queries to retrieve the same client. For example, when issuing a token using the auth code grant, this change reduces the number of queries executed by three:

Before

After

select * from "oauth_clients" where "id" = '9cda...' limit 1 select * from "oauth_clients" where "id" = '9cda...' limit 1 select * from "oauth_clients" where "id" = '9cda...' limit 1 select exists(select * from "oauth_auth_codes" where "id" = '0ab0...' and "revoked" = 0) as "exists" select * from "oauth_clients" where "id" = '9cda...' limit 1 insert into "oauth_access_tokens" ("id", "user_id", "client_id", "scopes", "revoked", "created_at", "updated_at", "expires_at") values ('36ef...', '1', '9cda...', '["create","read"]', 0, '2024-08-26 02:03:54', '2024-08-26 02:03:54', '2025-08-26 02:03:54') insert into "oauth_refresh_tokens" ("id", "access_token_id", "revoked", "expires_at") values ('0ed5...', 0, '2025-08-26 02:03:54') update "oauth_auth_codes" set "revoked" = 1 where "id" = '0ab0...'

select * from "oauth_clients" where "id" = '9cda...' limit 1 select exists(select * from "oauth_auth_codes" where "id" = '0ab0...' and "revoked" = 0) as "exists" insert into "oauth_access_tokens" ("id", "user_id", "client_id", "scopes", "revoked", "created_at", "updated_at", "expires_at") values ('36ef...', '1', '9cda...', '["create","read"]', 0, '2024-08-26 02:03:54', '2024-08-26 02:03:54', '2025-08-26 02:03:54') insert into "oauth_refresh_tokens" ("id", "access_token_id", "revoked", "expires_at") values ('0ed5...', 0, '2025-08-26 02:03:54') update "oauth_auth_codes" set "revoked" = 1 where "id" = '0ab0...'

[github-actions]

Thanks for submitting a PR!

Note that draft PR's are not reviewed. If you would like a review, please mark your pull request as ready for review in the GitHub user interface.

Pull requests that are abandoned in draft may be closed due to inactivity.