Skip to content

fix: adding missing scopes for token #52

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
flaviostutz merged 1 commit into from
Jan 13, 2025
Merged

fix: adding missing scopes for token #52

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 7 additions & 1 deletion lib/src/wso2/wso2-utils.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -170,12 +170,18 @@ export const getBearerToken = async (
config: Wso2ApimConfig,
clientCredentials: ClientCredentials,
): Promise<string> => {
// tested minimum for publisher: apim:api_create apim:api_view apim:api_publish apim:api_delete
const scopesPublisher =
'apim:api_create apim:api_delete apim:api_publish apim:api_view apim:client_certificates_add apim:client_certificates_update apim:client_certificates_view apim:document_create apim:document_manage apim:ep_certificates_add apim:ep_certificates_update apim:ep_certificates_view apim:mediation_policy_manage apim:pub_alert_manage apim:publisher_settings apim:subscription_block apim:subscription_view apim:threat_protection_policy_create apim:threat_protection_policy_manage';
const scopesStore =
'apim:api_key apim:app_manage apim:store_settings apim:sub_alert_manage apim:sub_manage apim:subscribe';

const data = qs.stringify({
// eslint-disable-next-line camelcase
grant_type: 'password',
username: config.username,
password: config.password,
scope: 'apim:api_create apim:api_view apim:api_publish apim:api_delete',
scope: `${scopesPublisher} ${scopesStore}`,
});

const authTokenBase64 = Buffer.from(
Expand Down
Loading