pixelfed/app/Providers/AuthServiceProvider.php

<?php

namespace App\Providers;

use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
use Laravel\Passport\Passport;

class AuthServiceProvider extends ServiceProvider
{
    /**
     * The policy mappings for the application.
     *
     * @var array
     */
    protected $policies = [
        'App\Model' => 'App\Policies\ModelPolicy',
    ];

    /**
     * Register any authentication / authorization services.
     *
     * @return void
     */
    public function boot()
    {
        $this->registerPolicies();

        if(config('pixelfed.oauth_enabled')) {
            Passport::routes();
            Passport::tokensExpireIn(now()->addDays(15));
            Passport::refreshTokensExpireIn(now()->addDays(30));
            Passport::enableImplicitGrant();
            
            Passport::setDefaultScope([
                'user:read',
                'user:write'
            ]);

            Passport::tokensCan([
                'user:read' => 'Read a user’s profile info and media',
                'user:write' => 'This scope lets an app "Change your profile information"',
            ]);
        }
    }
}