tangled
alpha
login
or
join now
margin.at
/
margin
89
fork
atom
Write on the margins of the internet. Powered by the AT Protocol.
margin.at
extension
web
atproto
comments
89
fork
atom
overview
issues
4
pulls
1
pipelines
fix oauth scopes
scanash.com
3 weeks ago
94855182
e87fc075
+4
-4
1 changed file
expand all
collapse all
unified
split
backend
internal
oauth
handler.go
+4
-4
backend/internal/oauth/handler.go
···
148
148
149
149
pkceVerifier, pkceChallenge := client.GeneratePKCE()
150
150
151
151
-
scope := "atproto offline_access blob:* blob:image/jpeg blob:image/png include:at.margin.authFull"
151
151
+
scope := "atproto blob:* blob:image/jpeg blob:image/png include:at.margin.authFull"
152
152
153
153
parResp, state, dpopNonce, err := client.SendPAR(meta, handle, scope, dpopKey, pkceChallenge)
154
154
if err != nil {
···
236
236
}
237
237
238
238
pkceVerifier, pkceChallenge := client.GeneratePKCE()
239
239
-
scope := "atproto offline_access blob:* blob:image/jpeg blob:image/png include:at.margin.authFull"
239
239
+
scope := "atproto blob:* blob:image/jpeg blob:image/png include:at.margin.authFull"
240
240
241
241
parResp, state, dpopNonce, err := client.SendPAR(meta, req.Handle, scope, dpopKey, pkceChallenge)
242
242
if err != nil {
···
316
316
}
317
317
318
318
pkceVerifier, pkceChallenge := client.GeneratePKCE()
319
319
-
scope := "atproto offline_access blob:* blob:image/jpeg blob:image/png include:at.margin.authFull"
319
319
+
scope := "atproto blob:* blob:image/jpeg blob:image/png include:at.margin.authFull"
320
320
321
321
parResp, state, dpopNonce, err := client.SendPARWithPrompt(meta, "", scope, dpopKey, pkceChallenge, "create")
322
322
if err != nil {
···
608
608
"redirect_uris": []string{client.RedirectURI},
609
609
"grant_types": []string{"authorization_code", "refresh_token"},
610
610
"response_types": []string{"code"},
611
611
-
"scope": "atproto offline_access blob:* blob:image/jpeg blob:image/png include:at.margin.authFull",
611
611
+
"scope": "atproto blob:* blob:image/jpeg blob:image/png include:at.margin.authFull",
612
612
"token_endpoint_auth_method": "private_key_jwt",
613
613
"token_endpoint_auth_signing_alg": "ES256",
614
614
"dpop_bound_access_tokens": true,