mirrors/at-container-registry
1
0
Fork 0
mirror of https://tangled.org/evan.jarrett.net/at-container-registry synced 2026-09-19 16:54:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

add back individual scopes

Browse Source
This commit is contained in:
Evan Jarrett
2025-12-26 17:05:51 -06:00
parent 41bcee4a59
commit 4cda163099
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/auth/oauth/client.go
+9 -2
View File
@@ -73,14 +73,21 @@ func RedirectURI(baseURL string) string {
}
// GetDefaultScopes returns the default OAuth scopes for ATCR registry operations.
// Uses io.atcr.permissions#registry permission-set to bundle repo and rpc scopes.
// Includes io.atcr.authFullApp permission-set plus individual scopes for PDS compatibility.
// Blob scopes are listed explicitly (not supported in Lexicon permission-sets).
func GetDefaultScopes(did string) []string {
return []string{
"atproto",
// Permission-set bundles repo and rpc scopes
// Permission-set (for future PDS support)
// See lexicons/io/atcr/authFullApp.json for definition
"io.atcr.authFullApp",
// Individual repo/rpc scopes (for current PDS compatibility)
fmt.Sprintf("repo:%s", atproto.ManifestCollection),
fmt.Sprintf("repo:%s", atproto.TagCollection),
fmt.Sprintf("repo:%s", atproto.StarCollection),
fmt.Sprintf("repo:%s", atproto.SailorProfileCollection),
fmt.Sprintf("repo:%s", atproto.RepoPageCollection),
"rpc:com.atproto.repo.getRecord?aud=*",
// Blob scopes (not supported in Lexicon permission-sets)
// Image manifest types (single-arch)
"blob:application/vnd.oci.image.manifest.v1+json",