Write on the margins of the internet. Powered by the AT Protocol. margin.at
extension web atproto comments

fix oauth scopes

+4 -4
+4 -4
backend/internal/oauth/handler.go
··· 148 148 149 149 pkceVerifier, pkceChallenge := client.GeneratePKCE() 150 150 151 - scope := "atproto offline_access blob:* blob:image/jpeg blob:image/png include:at.margin.authFull" 151 + scope := "atproto blob:* blob:image/jpeg blob:image/png include:at.margin.authFull" 152 152 153 153 parResp, state, dpopNonce, err := client.SendPAR(meta, handle, scope, dpopKey, pkceChallenge) 154 154 if err != nil { ··· 236 236 } 237 237 238 238 pkceVerifier, pkceChallenge := client.GeneratePKCE() 239 - scope := "atproto offline_access blob:* blob:image/jpeg blob:image/png include:at.margin.authFull" 239 + scope := "atproto blob:* blob:image/jpeg blob:image/png include:at.margin.authFull" 240 240 241 241 parResp, state, dpopNonce, err := client.SendPAR(meta, req.Handle, scope, dpopKey, pkceChallenge) 242 242 if err != nil { ··· 316 316 } 317 317 318 318 pkceVerifier, pkceChallenge := client.GeneratePKCE() 319 - scope := "atproto offline_access blob:* blob:image/jpeg blob:image/png include:at.margin.authFull" 319 + scope := "atproto blob:* blob:image/jpeg blob:image/png include:at.margin.authFull" 320 320 321 321 parResp, state, dpopNonce, err := client.SendPARWithPrompt(meta, "", scope, dpopKey, pkceChallenge, "create") 322 322 if err != nil { ··· 608 608 "redirect_uris": []string{client.RedirectURI}, 609 609 "grant_types": []string{"authorization_code", "refresh_token"}, 610 610 "response_types": []string{"code"}, 611 - "scope": "atproto offline_access blob:* blob:image/jpeg blob:image/png include:at.margin.authFull", 611 + "scope": "atproto blob:* blob:image/jpeg blob:image/png include:at.margin.authFull", 612 612 "token_endpoint_auth_method": "private_key_jwt", 613 613 "token_endpoint_auth_signing_alg": "ES256", 614 614 "dpop_bound_access_tokens": true,