Questions tagged [scopes]

An OAuth Scope is a permission setting that limits the permissiveness of a given OAuth Token. Clients therefore provide a list of desired Scopes when obtaining a Token (alongside standard OAuth ClientId and Client Authentication details). The Token will then be granted (or not) according to the Authentication process and the Scopes granted for the given Client Id

383 questions
1
vote
1 answer

Sequelize v6.2.0: include.model.getTableName is not function

Currently, I am using sequelize v6.2.0 with node.js for creating rest apis. I want to add profile data to user by using scopes like below. Unfortunately, it's making include.model.getTableName is not function error. (models/user.js) 'use…
Kevin Li
  • 130
  • 5
1
vote
0 answers

Google Fit: Read steps without using a read scope

Taking into account the approaching Google Fit changes on their policies and APIs I am trying to adapt my code getting rid of any read scope (as they will be declared restrictive). I need to record steps and also read them periodically. I'm…
franmontiel
  • 1,860
  • 1
  • 16
  • 20
1
vote
2 answers

How to function chain instead of if else on a variable?

Hi I'm wondering if there is a nicer way to write this line of code using scoped functions instead of if else. I want to chain the .addTOBackStack() function depending on my addToStack variable if(addToStack){ supportFragmentManager …
Jisoo
  • 43
  • 6
1
vote
1 answer

AAD B2C - User consent not asked

Context: Azure AD B2C for a Tenant External Identity Provider configured B2C login flow (sign-in sign-up) configured API backend defined as Application with 2 scopes in AAD B2C of this Tenant "Admins and users" can consent External client/Third…
Francois
  • 10,730
  • 7
  • 47
  • 80
1
vote
0 answers

Facebook API scopes removed

We are connecting to the FB API to retrieve an access token to be able to publish a post on the user FB page. We request this permissions: email, read_insights, pages_show_list, pages_read_engagement, pages_manage_metadata, pages_read_user_content,…
nasy
  • 11
  • 3
1
vote
1 answer

User/service account, scope, AppEngine and GSuite (sheet v4 api)

I build this very simple code, very similar to the tutorial here. I simply use the default credential, instead of using a service account key file (I can explain why if required, but in short, it's not secured!) To test it, simply change the sheet…
1
vote
0 answers

google photos api missing scope

I am apart of an organization which stores event photos in a organization google photos account. We desire to display these photos via PHP on our website. I have followed the guidance of adding the API library for googlephotos and an OATH2…
Kodiak
  • 33
  • 3
1
vote
1 answer

Third party access to attachments under the “readonly” Gmail scope

Accidentally gave permission to a third party app to my Gmail, under the “view your emails and settings”, the “readonly” scope https://www.googleapis.com/auth/gmail.readonly Would this have given the ability for the third party to directly download…
1
vote
1 answer

Laravel scopes endless loop on eloquent query log

I made a scope which ends up somehow in an endless loop. While simplifying it to the minimal reproducible example I came to this: public function apply(Builder $builder, Model $model) { Log::info('[Search] SQL: ' . $builder->toSql() . "…
Norgul
  • 4,613
  • 13
  • 61
  • 144
1
vote
3 answers

How to make chainable methods (scopes) with conditions not tied to database

I have a model Item, which has a relation to itself. class Item < ActiveRecord::Base has_many :subitems, :class_name => "Item", :foreign_key => "superitem_id" belongs_to :superitem, :class_name => "Item" end And I want to query all items which…
fetsh
  • 1,949
  • 1
  • 16
  • 17
1
vote
2 answers

Why the interpreter doesn‘t report an error?

class A: name = 10 # this is a class variable def fun(self): print('this is a function') return name # this is the return value, but same 'name' name = A() name.fun() print(name.fun()) # operation result this is a…
holaforce
  • 11
  • 2
1
vote
2 answers

Google Sheet API access with Application Default credentials

I am trying to access Google Sheet (read only mode) from Python (runs in GKE). I am able to get application default creds, but getting scopes issue (as I am missing https://www.googleapis.com/auth/spreadsheets.readonly scope). See code below: from…
gabi
  • 1,003
  • 5
  • 12
  • 30
1
vote
0 answers

OAuth2.0/OIDC Public Clients: What implementation is recommended for authentication & scopes consent when there is no third-party involved?

Context I am developing a solution with Two clients, a mobile one and an SPA. An authorization server under my control. A resource server / identity provider, that provides user data and features through an API. I am using OAuth2.0 because it can…
Hillfias
  • 21
  • 6
1
vote
2 answers

I did the "Expose an API" in Azure but cannot get the token for that scope to a client program

I'm trying to build a WebAPI and want to use a scope to limit permissions for other clients applications. I created a scope "BuildingAccess" on the Expose an API blade, and added the other client application to the authorized list with that scope. …
dxk3355
  • 146
  • 1
  • 2
  • 12
1
vote
0 answers

Unable to identify scope needed to integrate

We are trying to integrate Salesforce(sandbox) with Uber and registered an app with it. At a step , its asking for scope. Not able to find it anywhere in the article. Can someone help me where will it be available. Below is the article from Uber…
Sourabh
  • 11
  • 1