A container registry that uses the AT Protocol for manifest storage and S3 for blob storage.
try fix permission scope again
+8
-7
+8
-7
pkg/auth/oauth/client.go
+8
-7
pkg/auth/oauth/client.go
···
80
80
"atproto",
81
81
// Permission-set (for future PDS support)
82
82
// See lexicons/io/atcr/authFullApp.json for definition
83
-
"io.atcr.authFullApp",
83
+
// Uses "include:" prefix per ATProto permission spec
84
+
"include:io.atcr.authFullApp",
84
85
// Individual repo/rpc scopes (for current PDS compatibility)
85
-
fmt.Sprintf("repo:%s", atproto.ManifestCollection),
86
-
fmt.Sprintf("repo:%s", atproto.TagCollection),
87
-
fmt.Sprintf("repo:%s", atproto.StarCollection),
88
-
fmt.Sprintf("repo:%s", atproto.SailorProfileCollection),
89
-
fmt.Sprintf("repo:%s", atproto.RepoPageCollection),
90
-
"rpc:com.atproto.repo.getRecord?aud=*",
86
+
// fmt.Sprintf("repo:%s", atproto.ManifestCollection),
87
+
// fmt.Sprintf("repo:%s", atproto.TagCollection),
88
+
// fmt.Sprintf("repo:%s", atproto.StarCollection),
89
+
// fmt.Sprintf("repo:%s", atproto.SailorProfileCollection),
90
+
// fmt.Sprintf("repo:%s", atproto.RepoPageCollection),
91
+
// "rpc:com.atproto.repo.getRecord?aud=*",
91
92
// Blob scopes (not supported in Lexicon permission-sets)
92
93
// Image manifest types (single-arch)
93
94
"blob:application/vnd.oci.image.manifest.v1+json",