Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

feat: add external API key scopes#19916

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Conversation

ThomasK33
Copy link
Member

@ThomasK33ThomasK33 commentedSep 22, 2025
edited
Loading

Add support for low-level API key scopes

This PR adds support for fine-grained API key scopes based on RBAC resource:action pairs. It includes:

  1. A new endpoint/api/v2/auth/scopes to list all public low-level API key scopes
  2. Generated constants in the SDK for all public scopes
  3. Tests to verify scope validation during token creation
  4. Updated API documentation to reflect the expanded scope options

The implementation allows users to create API keys with specific permissions likeworkspace:read ortemplate:use instead of only the legacyall orapplication_connect scopes.

Fixes#19847

@ThomasK33Graphite App
Copy link
MemberAuthor

ThomasK33 commentedSep 22, 2025
edited
Loading

This stack of pull requests is managed byGraphite. Learn more aboutstacking.

@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch from4f64c51 tocaa7377CompareSeptember 22, 2025 15:28
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch 2 times, most recently froma87664b toa3fe88dCompareSeptember 22, 2025 16:33
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch fromcaa7377 tobf1e4e9CompareSeptember 22, 2025 16:33
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch froma3fe88d to85aef6bCompareSeptember 22, 2025 17:03
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch 2 times, most recently from76ae5ab tof1eed85CompareSeptember 22, 2025 17:28
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch 2 times, most recently from1783eb7 to8630b57CompareSeptember 22, 2025 17:42
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch 2 times, most recently fromcb2f97e toc96c93dCompareSeptember 22, 2025 19:30
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch 2 times, most recently fromc7a9788 toe36b0c1CompareSeptember 23, 2025 08:04
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch 2 times, most recently from0ae1500 tob7ba894CompareSeptember 23, 2025 08:57
@ThomasK33ThomasK33 linked an issueSep 23, 2025 that may beclosed by this pull request
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch 6 times, most recently from3223b46 toe3bf61cCompareSeptember 23, 2025 13:45
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch fromf5e0777 to2bf3c3cCompareSeptember 24, 2025 16:41
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch frombbd9174 to969baa9CompareSeptember 24, 2025 16:44
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch from2bf3c3c toe5ef1f0CompareSeptember 24, 2025 16:44
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch from969baa9 to939267fCompareSeptember 24, 2025 20:50
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch frome5ef1f0 to32b4c5dCompareSeptember 24, 2025 20:50
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch from939267f to8e56891CompareSeptember 25, 2025 15:46
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch 2 times, most recently from6b3d164 to5335d8bCompareSeptember 25, 2025 15:46
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch from8e56891 to2cddda5CompareSeptember 25, 2025 15:46
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch from2cddda5 to6258186CompareSeptember 25, 2025 15:56
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch from5335d8b to6b9783aCompareSeptember 25, 2025 15:56
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch from6258186 to4f84ffaCompareSeptember 25, 2025 16:05
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch 2 times, most recently froma3329a4 to45d6550CompareSeptember 25, 2025 16:25
@ThomasK33ThomasK33force-pushed thethomask33/09-22-add_curated_scope_catalog branch from4f84ffa to6466375CompareSeptember 26, 2025 07:45
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch 2 times, most recently from7f0cdfd to2ea1b29CompareSeptember 26, 2025 08:25
@ThomasK33Graphite App
Copy link
MemberAuthor

ThomasK33 commentedSep 26, 2025
edited
Loading

Merge activity

  • Sep 26, 9:30 AM UTC: A user started a stack merge that includes this pull request viaGraphite.
  • Sep 26, 9:32 AM UTC:Graphite rebased this pull request as part of a merge.
  • Sep 26, 9:43 AM UTC:@ThomasK33 merged this pull request withGraphite.

@ThomasK33ThomasK33 changed the base branch fromthomask33/09-22-add_curated_scope_catalog tographite-base/19916September 26, 2025 09:30
@ThomasK33ThomasK33 changed the base branch fromgraphite-base/19916 tomainSeptember 26, 2025 09:30
Add /auth/scopes endpoint returning curated list of public low-level API key scopes (resource:action format).This read-only endpoint requires no authentication and provides SDK constants for all public scopes.
@ThomasK33ThomasK33force-pushed thethomask33/09-22-feat_add_public_api_key_scope_endpoint branch from2ea1b29 to6c0e2ddCompareSeptember 26, 2025 09:31
@ThomasK33ThomasK33 merged commit4bda395 intomainSep 26, 2025
37 checks passed
@ThomasK33ThomasK33 deleted the thomask33/09-22-feat_add_public_api_key_scope_endpoint branchSeptember 26, 2025 09:43
@github-actionsgithub-actionsbot locked and limited conversation to collaboratorsSep 26, 2025
Sign up for freeto subscribe to this conversation on GitHub. Already have an account?Sign in.
Reviewers

@EmyrkEmyrkEmyrk approved these changes

@aslilacaslilacAwaiting requested review from aslilac

Assignees

@ThomasK33ThomasK33

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Built-in low-level scope catalog (resource:action)
2 participants
@ThomasK33@Emyrk

[8]ページ先頭

©2009-2025 Movatter.jp