perlsky is a Perl 5 implementation of an AT Protocol Personal Data Server.
Strengthen OAuth include scope coverage
+26
+26
t/oauth-include.t
+26
t/oauth-include.t
···
59
59
'com.atproto.server.createSession',
60
60
],
61
61
},
62
+
{
63
+
type => 'permission',
64
+
resource => 'blob',
65
+
accept => ['image/*'],
66
+
},
67
+
{
68
+
type => 'permission',
69
+
resource => 'identity',
70
+
attr => 'handle',
71
+
},
62
72
],
63
73
} if $nsid eq 'app.bsky.authManageNotifications';
64
74
return undef;
···
109
119
collection => 'com.atproto.server.createSession',
110
120
),
111
121
'compiled scope drops out-of-authority repo permissions from permission sets',
122
+
);
123
+
ok(
124
+
!oauth_scope_allows_permission(
125
+
$compiled,
126
+
type => 'blob',
127
+
mime => 'image/png',
128
+
),
129
+
'compiled scope ignores blob permissions from permission sets',
130
+
);
131
+
ok(
132
+
!oauth_scope_allows_permission(
133
+
$compiled,
134
+
type => 'identity',
135
+
attr => 'handle',
136
+
),
137
+
'compiled scope ignores identity permissions from permission sets',
112
138
);
113
139
}
114
140