A container registry that uses the AT Protocol for manifest storage and S3 for blob storage. atcr.io
docker container atproto go

try fix permission scope again

evan.jarrett.net 012a14c4 4cda1630

verified
Changed files
+8 -7
pkg
auth
oauth
+8 -7
pkg/auth/oauth/client.go
··· 80 80 "atproto", 81 81 // Permission-set (for future PDS support) 82 82 // See lexicons/io/atcr/authFullApp.json for definition 83 - "io.atcr.authFullApp", 83 + // Uses "include:" prefix per ATProto permission spec 84 + "include:io.atcr.authFullApp", 84 85 // Individual repo/rpc scopes (for current PDS compatibility) 85 - fmt.Sprintf("repo:%s", atproto.ManifestCollection), 86 - fmt.Sprintf("repo:%s", atproto.TagCollection), 87 - fmt.Sprintf("repo:%s", atproto.StarCollection), 88 - fmt.Sprintf("repo:%s", atproto.SailorProfileCollection), 89 - fmt.Sprintf("repo:%s", atproto.RepoPageCollection), 90 - "rpc:com.atproto.repo.getRecord?aud=*", 86 + // fmt.Sprintf("repo:%s", atproto.ManifestCollection), 87 + // fmt.Sprintf("repo:%s", atproto.TagCollection), 88 + // fmt.Sprintf("repo:%s", atproto.StarCollection), 89 + // fmt.Sprintf("repo:%s", atproto.SailorProfileCollection), 90 + // fmt.Sprintf("repo:%s", atproto.RepoPageCollection), 91 + // "rpc:com.atproto.repo.getRecord?aud=*", 91 92 // Blob scopes (not supported in Lexicon permission-sets) 92 93 // Image manifest types (single-arch) 93 94 "blob:application/vnd.oci.image.manifest.v1+json",