refactor: remove oauth scope for publisher auth code #1450
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Package(s) involved
publisher
Description of changes
Removed default publisher scope for
AuthorizationCode
grant type as we are removing the default Publisher role in AmazeeLabs/silverback-template#86It's still set in the Publisher configuration if we want to use
ResourceOwnerPassword
grant type.Motivation and context
Make OAuth work without the scope being set in the Consumer.
Access is checked based on the current user permission.
How has this been tested?
Manually.