Questions tagged [scopes]

An OAuth Scope is a permission setting that limits the permissiveness of a given OAuth Token. Clients therefore provide a list of desired Scopes when obtaining a Token (alongside standard OAuth ClientId and Client Authentication details). The Token will then be granted (or not) according to the Authentication process and the Scopes granted for the given Client Id

383 questions
4
votes
3 answers

What is the `.../auth/youtube.download` scope for YouTube Data API v3?

In the select scope screen for YouTube Data API v3 you can select the following scope: Scope risk API Scope User-facing description? (non-sensitive) YouTube Data API v3 .../auth/youtube.download Download your public YouTube videos To me,…
August Janse
  • 290
  • 1
  • 6
  • 18
4
votes
0 answers

WPF Core DependencyInjection Scoped

I have the following projects: .Net Standard 2.0 Service Lib Asp.Net Web API Project WPF Core 3.1 App The plan was to share the Service layer between the API and the WPF App. In the Web API I add a scoped UnitOfWork Service that itself uses scoped…
user1910198
  • 51
  • 1
  • 2
4
votes
1 answer

Do we use "scope" for client credential grant type? Why?

In most OAuth2 typical use cases, the scope is used by resource owner password grant type, or authorization code flow, where a user login is required. It seems that scope is mainly used to control access of users' resource. For example, to authorize…
Frankie Hung
  • 561
  • 1
  • 6
  • 16
4
votes
1 answer

How to narrow scopes for Google Apps Script to specific files

Main Issue: I have two Google spreadsheets: a template and a master. The template is sent out to people to make a copy of, fill in, and then I have a script that copies their tab to the master spreadsheet. Currently the authorization is very…
EastBayB
  • 63
  • 1
  • 3
4
votes
0 answers

Google Auth : Correct scope for copying a publicly shared Google Doc

I have created an App that is supposed to copy a publicly shared Google Document to the logged-in user's Google Drive. It works well if the scope is set to https://www.googleapis.com/auth/drive, but if I restrict it to…
Amarsh
  • 11,214
  • 18
  • 53
  • 78
4
votes
1 answer

WebAPI scope authorization through azure app registrations

I am trying to control authorization via app registrations in Azure. Right now, I have two app registrations set up. ApiApp ClientApp ApiApp is set up with the default settings, but I have added this to the manifest: "oauth2Permissions": [ { …
jeremyr
  • 456
  • 1
  • 3
  • 12
4
votes
1 answer

Android getServerAuthCode() without extra permissions

I'm trying to authenticate an Android user with a backend server: the app calls getServerAuthCode() and forwards the authorization code using HTTPS to our BE the BE exchanges the server authorization code for an access token using…
4
votes
1 answer

Issues chaining scopes in Rails with context

I have 4 models: Artists, Editions, Events & EventItems. Editions have many Events Events have many Artists through EventItems Editions have many Artists through Events On artists I have a scope published I define active as an artists who is on an…
ere
  • 1,739
  • 3
  • 19
  • 41
4
votes
0 answers

Google OAuth2 login with youtube scope

I am using google's OAuth2 login system (php library) and I want to get user's real email address as well as details for his youtube channel (with his permission). I have tried using the following…
nteath
  • 250
  • 1
  • 13
4
votes
3 answers

One all-encompassing definition of JavaScript closure

I have read 10s of SO references on closures, MDN references and other blog articles. They all seem to define closures in their own ways. For example, From MDN documentation: function makeFunc() { var name = "Mozilla"; function displayName() { …
Athapali
  • 1,091
  • 4
  • 25
  • 48
4
votes
1 answer

What are scope values for an OAuth2 server?

I'm facing a difficulty to understand how scopes work. I found here a small text that describes the scopes of stackexchange api but i need more information on how they work (not specifically this one...). Can someone provide me a concept? Thanks in…
CodeArtist
  • 5,534
  • 8
  • 40
  • 65
4
votes
1 answer

Google Apps Marketplace app - how to add scopes for supporting app

We have two appengine apps. One is a service app that provides data for the other, which is customer-facing. We are putting the customer-facing app into Google Marketplace as an installable app. We would like to include scopes in the application…
4
votes
1 answer

Running rake assets:precompile fails when there's no tables (yet)

Whenever the database is clean, with no tables, which happens often in testing and when setting up a new server to deploy to, many rake tasks, like assets:precompile, fail with this error: rake aborted! PG::Error: ERROR: relation "users" does not…
Pablo Fernandez
  • 279,434
  • 135
  • 377
  • 622
3
votes
2 answers

Getting a GET request param into an @ViewScoped bean

I have a (request-scoped) list from which the user may select a "PQ" (list of links). When clicked or otherwise entered into the browser the main page for each PQ shall be displayed. Each PQ's page is of the…
Kawu
  • 13,647
  • 34
  • 123
  • 195
3
votes
3 answers

How to extract profile_pic of a user when they are signing in from Google

I'm making a django website, I have 2 login methods. One is the default email password login and another is by logging in from Google. What I want is when the user logs in from google django should automatically fetch the profile_pic of that user…
1 2
3
25 26