forked from
margin.at/margin
Write on the margins of the internet. Powered by the AT Protocol.
remove unnecessary RPC scopes from OAuth requests
+3
-12
+3
-12
backend/internal/oauth/handler.go
+3
-12
backend/internal/oauth/handler.go
···
147
147
"at.margin.reply " +
148
148
"at.margin.like " +
149
149
"at.margin.collection " +
150
-
"at.margin.collectionItem " +
151
-
"rpc:app.bsky.actor.searchActorsTypeahead?aud=* " +
152
-
"rpc:app.bsky.actor.getProfiles?aud=* " +
153
-
"rpc:com.atproto.identity.resolveHandle?aud=*"
150
+
"at.margin.collectionItem"
154
151
155
152
parResp, state, dpopNonce, err := client.SendPAR(meta, handle, scope, dpopKey, pkceChallenge)
156
153
if err != nil {
···
257
254
"at.margin.reply " +
258
255
"at.margin.like " +
259
256
"at.margin.collection " +
260
-
"at.margin.collectionItem " +
261
-
"rpc:app.bsky.actor.searchActorsTypeahead?aud=* " +
262
-
"rpc:app.bsky.actor.getProfiles?aud=* " +
263
-
"rpc:com.atproto.identity.resolveHandle?aud=*"
257
+
"at.margin.collectionItem"
264
258
265
259
parResp, state, dpopNonce, err := client.SendPAR(meta, req.Handle, scope, dpopKey, pkceChallenge)
266
260
if err != nil {
···
517
511
"at.margin.reply " +
518
512
"at.margin.like " +
519
513
"at.margin.collection " +
520
-
"at.margin.collectionItem " +
521
-
"rpc:app.bsky.actor.searchActorsTypeahead?aud=* " +
522
-
"rpc:app.bsky.actor.getProfiles?aud=* " +
523
-
"rpc:com.atproto.identity.resolveHandle?aud=*",
514
+
"at.margin.collectionItem",
524
515
"token_endpoint_auth_method": "private_key_jwt",
525
516
"token_endpoint_auth_signing_alg": "ES256",
526
517
"dpop_bound_access_tokens": true,