Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[App2App] Scopes should be validated according to client type #4357

Open
tung2744 opened this issue Jun 18, 2024 — with Linear · 1 comment
Open

[App2App] Scopes should be validated according to client type #4357

tung2744 opened this issue Jun 18, 2024 — with Linear · 1 comment
Labels
bug/minor > 20% users will be affected by the issue, fix optionally cooldown/enhancement minor enhancement that users can see

Comments

Copy link
Contributor

Assume AppA is authenticated, and AppB is not authenticated.

Currently, when appB tries to authenticated with app2app by AppA, the scopes of AppA's session will be inherited to appB's session. Therefore, say if AppA supports a scope that AppB doesn't support, that new AppB's session will get an incorrect scope.

Copy link

linear bot commented Jun 18, 2024

@fungc-io fungc-io added bug/minor > 20% users will be affected by the issue, fix optionally cooldown/enhancement minor enhancement that users can see labels Jul 15, 2024 — with Linear
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug/minor > 20% users will be affected by the issue, fix optionally cooldown/enhancement minor enhancement that users can see
Projects
None yet
Development

No branches or pull requests

2 participants