diff options
| author |  tobi <31960611+tsmethurst@users.noreply.github.com> | 2025-02-26 13:04:55 +0100 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2025-02-26 13:04:55 +0100 |
| commit | eb720241da3d786c6ec79f2325277fa4af23846f (patch) | |
| tree | 36e0e08699e55a56d247353d082cc0a2b8144999 /web | |
| parent | [chore]: Bump golang.org/x/crypto from 0.33.0 to 0.34.0 (#3824) (diff) | |
| download | gotosocial-eb720241da3d786c6ec79f2325277fa4af23846f.tar.xz | |
[feature] Enforce OAuth token scopes (#3835)
* move tokenauth to apiutil
* enforce scopes
* docs
* update test models, remove deprecated "follow"
* file header
* tests
* tweak scope matcher
* simplify...
* fix tests
* log user out of settings panel in case of oauth error
Diffstat (limited to 'web')
| -rw-r--r-- | web/source/settings/components/authorization/index.tsx | 10 | ||||
| -rw-r--r-- | web/source/settings/components/authorization/login.tsx | 2 |
2 files changed, 4 insertions, 8 deletions
diff --git a/web/source/settings/components/authorization/index.tsx b/web/source/settings/components/authorization/index.tsx index e8f4d6673..7c6373399 100644 --- a/web/source/settings/components/authorization/index.tsx +++ b/web/source/settings/components/authorization/index.tsx @@ -58,13 +58,9 @@ export function Authorization({ App }) { </div> ); } else if (error !== undefined) { - if ("status" in error && error.status === 401) { - // 401 unauthorized was received. - // That means the token or app we - // were using is no longer valid, - // so just log the user out. - logoutQuery(NoArg); - } + // Something went wrong, + // log the user out. + logoutQuery(NoArg); content = ( <div> diff --git a/web/source/settings/components/authorization/login.tsx b/web/source/settings/components/authorization/login.tsx index 870e9c343..28ed7953c 100644 --- a/web/source/settings/components/authorization/login.tsx +++ b/web/source/settings/components/authorization/login.tsx @@ -31,7 +31,7 @@ export default function Login({ }) { instance: useTextInput("instance", { defaultValue: window.location.origin }), - scopes: useValue("scopes", "user admin"), + scopes: useValue("scopes", "read write admin"), }; const [formSubmit, result] = useFormSubmit(form, useAuthorizeFlowMutation(), { |