chore: Reduce Azure DevOps scope (#9999)

ParabolInc · Jul 22, 2024 · e6a3c7d · e6a3c7d
1 parent efad77a
commit e6a3c7d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/packages/client/utils/AzureDevOpsClientManager.ts b/packages/client/utils/AzureDevOpsClientManager.ts
@@ -41,7 +41,8 @@ class AzureDevOpsClientManager {
     const verifier = AzureDevOpsClientManager.generateVerifier()
     const code = await AzureDevOpsClientManager.generateCodeChallenge(verifier)
     const redirect = makeHref('/auth/ado2')
-    const scope = '499b84ac-1321-427f-aa17-267ca6975798/.default offline_access'
+    const scope =
+      '499b84ac-1321-427f-aa17-267ca6975798/vso.project 499b84ac-1321-427f-aa17-267ca6975798/vso.work_write offline_access'
     const url = `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/authorize?client_id=${clientId}&response_type=code&redirect_uri=${redirect}&response_mode=query&scope=${scope}&state=${providerState}&code_challenge=${code}&code_challenge_method=S256`
 
     // Open synchronously because of Safari