Add more granular OAuth scopes (#7929)
* Add more granular OAuth scopes * Add human-readable descriptions of the new scopes * Ensure new scopes look good on the app UI * Add tests * Group scopes in screen and color-code dangerous ones * Fix wrong extra scope
This commit is contained in:
@ -55,7 +55,32 @@ Doorkeeper.configure do
|
||||
# For more information go to
|
||||
# https://github.com/doorkeeper-gem/doorkeeper/wiki/Using-Scopes
|
||||
default_scopes :read
|
||||
optional_scopes :write, :follow, :push
|
||||
optional_scopes :write,
|
||||
:'write:accounts',
|
||||
:'write:blocks',
|
||||
:'write:favourites',
|
||||
:'write:filters',
|
||||
:'write:follows',
|
||||
:'write:lists',
|
||||
:'write:media',
|
||||
:'write:mutes',
|
||||
:'write:notifications',
|
||||
:'write:reports',
|
||||
:'write:statuses',
|
||||
:read,
|
||||
:'read:accounts',
|
||||
:'read:blocks',
|
||||
:'read:favourites',
|
||||
:'read:filters',
|
||||
:'read:follows',
|
||||
:'read:lists',
|
||||
:'read:mutes',
|
||||
:'read:notifications',
|
||||
:'read:reports',
|
||||
:'read:search',
|
||||
:'read:statuses',
|
||||
:follow,
|
||||
:push
|
||||
|
||||
# Change the way client credentials are retrieved from the request object.
|
||||
# By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
|
||||
|
Reference in New Issue
Block a user