opensource/zpan
3
0
Fork 0
mirror of https://github.com/saltbo/zpan.git synced 2026-08-29 00:01:42 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(oauth): synchronize Realmroot client scopes

Browse Source
This commit is contained in:
saltbo
2026-08-02 17:15:17 -04:00
parent b818facdab
commit 461becc3d3
2 changed files with 22 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/backfill-oauth-scopes.ts
+7 -1
View File
@@ -22,6 +22,7 @@ interface OAuthResourceRow {
interface OAuthClientRow {
id: string
name?: string | null
scopes: string | null
}
@@ -43,6 +44,11 @@ export function buildOAuthScopeBackfill(
),
clients: clients.flatMap((client) => {
const scopes = parseScopes(client.scopes)
if (client.name === 'Realmroot ZPan') {
return scopes.length === OAUTH_SCOPES.length && OAUTH_SCOPES.every((scope) => scopes.includes(scope))
? []
: [{ id: client.id, scopes: JSON.stringify(OAUTH_SCOPES) }]
}
if (!scopes.includes(AuthorizationScope.OBJECTS_CREATE) || scopes.includes(AuthorizationScope.QUOTA_PURCHASE)) {
return []
}
@@ -124,7 +130,7 @@ function readRows(
execute: OAuthScopeD1Executor,
): { resources: OAuthResourceRow[]; clients: OAuthClientRow[] } {
const resourceSql = 'SELECT id, name, allowed_scopes AS allowedScopes FROM oauthResource;'
const clientSql = 'SELECT id, scopes FROM oauthClient;'
const clientSql = 'SELECT id, name, scopes FROM oauthClient;'
if (target.kind === 'd1') {
return {
resources: d1Rows(target, resourceSql, execute),