An OAuth Scope is a permission setting that limits the permissiveness of a given OAuth Token. Clients therefore provide a list of desired Scopes when obtaining a Token (alongside standard OAuth ClientId and Client Authentication details). The Token will then be granted (or not) according to the Authentication process and the Scopes granted for the given Client Id
Questions tagged [scopes]
383 questions
4
votes
3 answers
What is the `.../auth/youtube.download` scope for YouTube Data API v3?
In the select scope screen for YouTube Data API v3 you can select the following scope:
Scope risk
API
Scope
User-facing description?
(non-sensitive)
YouTube Data API v3
.../auth/youtube.download
Download your public YouTube videos
To me,…

August Janse
- 290
- 1
- 6
- 18
4
votes
0 answers
WPF Core DependencyInjection Scoped
I have the following projects:
.Net Standard 2.0 Service Lib
Asp.Net Web API Project
WPF Core 3.1 App
The plan was to share the Service layer between the API and the WPF App.
In the Web API I add a scoped UnitOfWork Service that itself uses scoped…

user1910198
- 51
- 1
- 2
4
votes
1 answer
Do we use "scope" for client credential grant type? Why?
In most OAuth2 typical use cases, the scope is used by resource owner password grant type, or authorization code flow, where a user login is required.
It seems that scope is mainly used to control access of users' resource. For example, to authorize…

Frankie Hung
- 561
- 1
- 6
- 16
4
votes
1 answer
How to narrow scopes for Google Apps Script to specific files
Main Issue:
I have two Google spreadsheets: a template and a master.
The template is sent out to people to make a copy of, fill in, and then I have a script that copies their tab to the master spreadsheet.
Currently the authorization is very…

EastBayB
- 63
- 1
- 3
4
votes
0 answers
Google Auth : Correct scope for copying a publicly shared Google Doc
I have created an App that is supposed to copy a publicly shared Google Document to the logged-in user's Google Drive. It works well if the scope is set to https://www.googleapis.com/auth/drive, but if I restrict it to…

Amarsh
- 11,214
- 18
- 53
- 78
4
votes
1 answer
WebAPI scope authorization through azure app registrations
I am trying to control authorization via app registrations in Azure.
Right now, I have two app registrations set up.
ApiApp
ClientApp
ApiApp is set up with the default settings, but I have added this to the manifest:
"oauth2Permissions": [
{
…

jeremyr
- 456
- 1
- 3
- 12
4
votes
1 answer
Android getServerAuthCode() without extra permissions
I'm trying to authenticate an Android user with a backend server:
the app calls getServerAuthCode() and forwards the authorization code using HTTPS to our BE
the BE exchanges the server authorization code for an access token using…

Samo Dadela
- 63
- 7
4
votes
1 answer
Issues chaining scopes in Rails with context
I have 4 models: Artists, Editions, Events & EventItems.
Editions have many Events
Events have many Artists through EventItems
Editions have many Artists through Events
On artists I have a scope published
I define active as an artists who is on an…

ere
- 1,739
- 3
- 19
- 41
4
votes
0 answers
Google OAuth2 login with youtube scope
I am using google's OAuth2 login system (php library) and I want to get user's real email address as well as details for his youtube channel (with his permission).
I have tried using the following…

nteath
- 250
- 1
- 13
4
votes
3 answers
One all-encompassing definition of JavaScript closure
I have read 10s of SO references on closures, MDN references and other blog articles. They all seem to define closures in their own ways. For example, From MDN documentation:
function makeFunc() {
var name = "Mozilla";
function displayName() {
…

Athapali
- 1,091
- 4
- 25
- 48
4
votes
1 answer
What are scope values for an OAuth2 server?
I'm facing a difficulty to understand how scopes work.
I found here a small text that describes the scopes of stackexchange api but i need more information on how they work (not specifically this one...). Can someone provide me a concept?
Thanks in…

CodeArtist
- 5,534
- 8
- 40
- 65
4
votes
1 answer
Google Apps Marketplace app - how to add scopes for supporting app
We have two appengine apps. One is a service app that provides data for the other, which is customer-facing. We are putting the customer-facing app into Google Marketplace as an installable app. We would like to include scopes in the application…

kallan
- 41
- 1
4
votes
1 answer
Running rake assets:precompile fails when there's no tables (yet)
Whenever the database is clean, with no tables, which happens often in testing and when setting up a new server to deploy to, many rake tasks, like assets:precompile, fail with this error:
rake aborted!
PG::Error: ERROR: relation "users" does not…

Pablo Fernandez
- 279,434
- 135
- 377
- 622
3
votes
2 answers
Getting a GET request param into an @ViewScoped bean
I have a (request-scoped) list from which the user may select a "PQ" (list of links). When clicked or otherwise entered into the browser the main page for each PQ shall be displayed. Each PQ's page is of the…

Kawu
- 13,647
- 34
- 123
- 195
3
votes
3 answers
How to extract profile_pic of a user when they are signing in from Google
I'm making a django website, I have 2 login methods. One is the default email password login and another is by logging in from Google.
What I want is when the user logs in from google django should automatically fetch the profile_pic of that user…

Kushagra Gupta
- 51
- 8