OAuth: please return the granted scope parameter in the obtain token response
#5286
Comments
|
Thanks - looking at the change: will this be returned as |
eufelipemateus
added a commit
to eufelipemateus/pixelfed
that referenced
this issue
Mar 4, 2025
* resolve merge conflicts * resolve merge conflicts * resolve merge conflicts * Update CollectionController, fix showCollection signature * Update ApiV1Dot1Controller, fix in-app registration * Update changelog * Fix missing video thumbnails on hashtag page (pixelfed#5394). * Update VerifyCsrfToken middleware, add oauth token. Fixes pixelfed#5426 * Fix oauth endpoint * New translations web.php (Portuguese, Brazilian) [ci skip] * New translations web.php (Portuguese) [ci skip] * New translations web.php (Serbian (Cyrillic)) [ci skip] * New translations web.php (Chinese Simplified) [ci skip] * New translations web.php (Chinese Traditional) [ci skip] * New translations web.php (Serbian (Latin)) [ci skip] * Update AdminSettingsController, increase max photo size limit from 50MB to 1GB * Update changelog. Fixes pixelfed#5431 * New translations web.php (Portuguese, Brazilian) [ci skip] * New translations web.php (Portuguese) [ci skip] * New translations web.php (Serbian (Cyrillic)) [ci skip] * New translations web.php (Chinese Simplified) [ci skip] * New translations web.php (Chinese Traditional) [ci skip] * New translations web.php (Serbian (Latin)) [ci skip] * Update BearerTokenResponse, return scopes in oauth/token endpoint. Fixes pixelfed#5286 * Update changelog * Fix typo * Update docker-compose.yml Expecting: TRUSTED CERTIFICATE) while SSL handshaking fixes: nginx-proxy/nginx-proxy#2287 * Refactor Hashtag component from pixelfed#5427 * Update compiled assets * Update AP Status Transformer, fix inReplyTo. Fixes pixelfed#5409 * Update changelog * Update .env.docker Updated DOCKER_PROXY_VERSION in .env * Update docker-compose.yml use DOCKER_PROXY_VERSION env var instead * Update Data Export, refactor following/follower and statuses exports to allow accounts of any size with api entity instead of ap * Update changelog * Update .env.docker Registry has changed. Old registry has been discontinued in August 2024. New Registry added, format of Docker tag has been adjusted as it now contains the Debian Release as well. Sample Version is set to current stable but can be adjusted to any of the available branches. * Update .env.docker Stick major.minor according to https://jippi.github.io/docker-pixelfed/customize/tags/#pixelfed-version Disable Debian Release Check until it's solved in dottie. Closes pixelfed#5264 * New translations web.php (Portuguese, Brazilian) [ci skip] * New translations web.php (German) [ci skip] * Add ReclaimUsername command * Update oauth/token, fix scope to be space separated string instead of array * New translations web.php (Spanish) [ci skip] * New translations web.php (German) [ci skip] * Fix notifications not being delivered by directly checking the state from the database * Add a push notification when a user is mentioned in a comment * New translations web.php (Spanish) [ci skip] * New translations web.php (German) [ci skip] * Fix text no posts archived * Update SearchApiV2Service, fix hashtag search * Increase username length limit from 15 to 30 * Update Discover, fix account bug * Add story components * Update AP Helpers, fix comment bug * New translations web.php (Finnish) [ci skip] * Update PublicApiController * New translations web.php (Finnish) [ci skip] * fix: don't restore memory limit after cities import Since this command can only be invoked by CLI, the process will exit after a successful import, so restoring the transient PHP memory limit doesn't really have any affect. In PHP 8.4, this throws the following error (which doesn't happen in 8.3 and below) > [entrypoint / 11-first-time-setup.sh] - (stderr) 128769/128769 [▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓] 100%[2025-01-20 11:29:23] production.ERROR: Failed to set memory limit to 134217728 bytes (Current memory usage is 134746112 bytes) {"exception":"[object] (ErrorException(code: 0): Failed to set memory limit to 134217728 bytes (Current memory usage is 134746112 bytes) at /var/www/app/Console/Commands/ImportCities.php:140) It seems to be a 8.4 behavior change, so removing the logic would make it go away * New translations web.php (Finnish) [ci skip] * New translations web.php (Finnish) [ci skip] * New translations web.php (Portuguese) [ci skip] * Update ComposeController, add max_media_attachments attribute * Update changelog * New translations web.php (Portuguese) [ci skip] * add kickstarter and monthly users badge (pixelfed#5589) Co-authored-by: daniel <[email protected]> * add kickstarter and monthly users badge (pixelfed#5589) (pixelfed#5591) Co-authored-by: Simon Laux <[email protected]> * DM * Staging (pixelfed#5594) * add kickstarter and monthly users badge (pixelfed#5589) Co-authored-by: daniel <[email protected]> * DM --------- Co-authored-by: Simon Laux <[email protected]> * Fix the local column for statuses to not include remote shares (pixelfed#5513) * Fix the local column for statuses to not include remote shares * Chunk the migration * Refactor migration * Staging (pixelfed#5603) * add kickstarter and monthly users badge (pixelfed#5589) Co-authored-by: daniel <[email protected]> * DM * Fix the local column for statuses to not include remote shares (pixelfed#5513) * Fix the local column for statuses to not include remote shares * Chunk the migration * Refactor migration --------- Co-authored-by: Simon Laux <[email protected]> Co-authored-by: Anil Kulkarni <[email protected]> * Fix GroupController, move groups enabled check to each method to fix route:list * Update changelog * Staging (pixelfed#5604) * add kickstarter and monthly users badge (pixelfed#5589) Co-authored-by: daniel <[email protected]> * DM * Fix the local column for statuses to not include remote shares (pixelfed#5513) * Fix the local column for statuses to not include remote shares * Chunk the migration * Refactor migration * Fix GroupController, move groups enabled check to each method to fix route:list * Update changelog --------- Co-authored-by: Simon Laux <[email protected]> Co-authored-by: Anil Kulkarni <[email protected]> * Update AdminSettingsController, persist updates to ConfigCacheService * Fix pixelfed#5619 * Update FixUsernames.php * fix(compose-modal): avoid WebGL if it's not needed * fix(compose-modal): update webgl-media-editor * New translations web.php (Hungarian) [ci skip] * Update MediaStorageService, handle local media deletes after successful S3 upload * Update changelog * Add AppRegister * Add form * Add rate limits, fix typo and styling * Update AppServiceProvider.php * Fix redirects * Update routes * Update AppRegisterController * Update AppRegisterController.php * Update AppRegisterController * New translations web.php (Russian) [ci skip] * Improve onboarding response * New translations web.php (Russian) [ci skip] * Updaet AppRegisterController, add client id/secret * use config_cache for max_caption_length * Update AppRegisterController.php * Update AppRegisterController.php * AdminStatsService: do not count deleted users * Skip thumbnail cloud upload if no thumbnail exists migrate2cloud fails on media without thumbnail. fix check for existing thumbnail, skip upload if none exists. * Refactor based on @jippi review * Update nodeinfo * Update ApiV1Controller, add mobile_registration attribute * Update ApiV1Controller.php * Update auth.php * Update ApiV1Controller.php * Update .env.example Adding the parameter INSTANCE_DISCOVER_PUBLIC="true" to prevent a HTTP 403 error at the explorer tab in the instance preview. * Update AccountTransformer.php * New variable for lang spanish * Variable for lang spanish * Update Dockerfile, fixes pixelfed#5535 pixelfed#5559 * Fix pixelfed#5582 * Fix pixelfed#5632 * Update status twitter:card to summary_large_image for images/albums * Update changelog * Staging (pixelfed#5674) * Update .env.docker Registry has changed. Old registry has been discontinued in August 2024. New Registry added, format of Docker tag has been adjusted as it now contains the Debian Release as well. Sample Version is set to current stable but can be adjusted to any of the available branches. * Update .env.docker Stick major.minor according to https://jippi.github.io/docker-pixelfed/customize/tags/#pixelfed-version Disable Debian Release Check until it's solved in dottie. Closes pixelfed#5264 * New translations web.php (Finnish) [ci skip] * New translations web.php (Finnish) [ci skip] * fix: don't restore memory limit after cities import Since this command can only be invoked by CLI, the process will exit after a successful import, so restoring the transient PHP memory limit doesn't really have any affect. In PHP 8.4, this throws the following error (which doesn't happen in 8.3 and below) > [entrypoint / 11-first-time-setup.sh] - (stderr) 128769/128769 [▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓] 100%[2025-01-20 11:29:23] production.ERROR: Failed to set memory limit to 134217728 bytes (Current memory usage is 134746112 bytes) {"exception":"[object] (ErrorException(code: 0): Failed to set memory limit to 134217728 bytes (Current memory usage is 134746112 bytes) at /var/www/app/Console/Commands/ImportCities.php:140) It seems to be a 8.4 behavior change, so removing the logic would make it go away * New translations web.php (Finnish) [ci skip] * New translations web.php (Finnish) [ci skip] * New translations web.php (Portuguese) [ci skip] * New translations web.php (Portuguese) [ci skip] * fix(compose-modal): avoid WebGL if it's not needed * fix(compose-modal): update webgl-media-editor * New translations web.php (Hungarian) [ci skip] * New translations web.php (Russian) [ci skip] * New translations web.php (Russian) [ci skip] * Update .env.example Adding the parameter INSTANCE_DISCOVER_PUBLIC="true" to prevent a HTTP 403 error at the explorer tab in the instance preview. * New variable for lang spanish * Variable for lang spanish * Update Dockerfile, fixes pixelfed#5535 pixelfed#5559 * Fix pixelfed#5582 * Fix pixelfed#5632 * Update status twitter:card to summary_large_image for images/albums * Update changelog --------- Co-authored-by: Lioh Moeller <[email protected]> Co-authored-by: Christian Winther <[email protected]> Co-authored-by: Taye Adeyemi <[email protected]> Co-authored-by: stemy2 <[email protected]> Co-authored-by: Uthanien <[email protected]> * New translations web.php (Slovak) [ci skip] * New variable for lan spanish on auth, profile, helpcenter, navmenu and settings * Update MediaController, fix redirect bug * Correct some typos in Spanish translations * add settings link in dropdown menu * New translations web.php (French) [ci skip] * fix icon name * Update resources/lang/es/navmenu.php Co-authored-by: Mackenzie <[email protected]> * Update resources/lang/es/profile.php Co-authored-by: Mackenzie <[email protected]> * Update resources/lang/es/profile.php Co-authored-by: Mackenzie <[email protected]> * Update resources/lang/es/helpcenter.php Co-authored-by: Mackenzie <[email protected]> * Update resources/lang/es/profile.php Co-authored-by: Mackenzie <[email protected]> * Update resources/lang/es/helpcenter.php Co-authored-by: Mackenzie <[email protected]> * Update resources/lang/es/profile.php Co-authored-by: Mackenzie <[email protected]> * Update resources/lang/es/helpcenter.php Co-authored-by: Mackenzie <[email protected]> * Update resources/lang/es/navmenu.php Co-authored-by: Mackenzie <[email protected]> * Update resources/lang/es/helpcenter.php Co-authored-by: Mackenzie <[email protected]> * Update resources/lang/es/navmenu.php Co-authored-by: Mackenzie <[email protected]> * Add localization:generate command to generate the js/vue l10n files from the blade translations * Move fallback media route * Prevent pulse crash when it is not configured * Update CuratedOnboarding, add new app:curated-onboarding command, extend email verification window to 7 days and fix resend verification mails * Update CHANGELOG.md * Add media:replacedomain command to replace S3 media urls * add embed translation for lang es in file helpcenter.php and full file site.php translated to es * minor fix in site.php lang es * New translations web.php (Spanish) [ci skip] * Update DirectMessageController, fix performance issue * Update DirectMessageController, fix query * Fix curl * New translations web.php (Bengali) [ci skip] * Update NewStatusPipeline, replaces pixelfed#5706 * Update NewStatusPipeline, improve fallback * Update dev from * add send weekly popular posts email (#24) * add send weekly popular posts email. * limit run in production * hide landing page * feat-dev: analytics feature (#25) * hotfix: send email just production * add app register * update front build * Update settings.php * Update settings.php * Update settings.php * add missing keys * adjust: fix pt navmenu.php * Update iar.blade.php - Fix in-app reg without hcaptcha (pixelfed#5807) * Staging (pixelfed#5674) * Update .env.docker Registry has changed. Old registry has been discontinued in August 2024. New Registry added, format of Docker tag has been adjusted as it now contains the Debian Release as well. Sample Version is set to current stable but can be adjusted to any of the available branches. * Update .env.docker Stick major.minor according to https://jippi.github.io/docker-pixelfed/customize/tags/#pixelfed-version Disable Debian Release Check until it's solved in dottie. Closes pixelfed#5264 * New translations web.php (Finnish) [ci skip] * New translations web.php (Finnish) [ci skip] * fix: don't restore memory limit after cities import Since this command can only be invoked by CLI, the process will exit after a successful import, so restoring the transient PHP memory limit doesn't really have any affect. In PHP 8.4, this throws the following error (which doesn't happen in 8.3 and below) > [entrypoint / 11-first-time-setup.sh] - (stderr) 128769/128769 [▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓] 100%[2025-01-20 11:29:23] production.ERROR: Failed to set memory limit to 134217728 bytes (Current memory usage is 134746112 bytes) {"exception":"[object] (ErrorException(code: 0): Failed to set memory limit to 134217728 bytes (Current memory usage is 134746112 bytes) at /var/www/app/Console/Commands/ImportCities.php:140) It seems to be a 8.4 behavior change, so removing the logic would make it go away * New translations web.php (Finnish) [ci skip] * New translations web.php (Finnish) [ci skip] * New translations web.php (Portuguese) [ci skip] * New translations web.php (Portuguese) [ci skip] * fix(compose-modal): avoid WebGL if it's not needed * fix(compose-modal): update webgl-media-editor * New translations web.php (Hungarian) [ci skip] * New translations web.php (Russian) [ci skip] * New translations web.php (Russian) [ci skip] * Update .env.example Adding the parameter INSTANCE_DISCOVER_PUBLIC="true" to prevent a HTTP 403 error at the explorer tab in the instance preview. * New variable for lang spanish * Variable for lang spanish * Update Dockerfile, fixes pixelfed#5535 pixelfed#5559 * Fix pixelfed#5582 * Fix pixelfed#5632 * Update status twitter:card to summary_large_image for images/albums * Update changelog --------- Co-authored-by: Lioh Moeller <[email protected]> Co-authored-by: Christian Winther <[email protected]> Co-authored-by: Taye Adeyemi <[email protected]> Co-authored-by: stemy2 <[email protected]> Co-authored-by: Uthanien <[email protected]> * Update iar.blade.php --------- Co-authored-by: daniel <[email protected]> Co-authored-by: Lioh Moeller <[email protected]> Co-authored-by: Christian Winther <[email protected]> Co-authored-by: Taye Adeyemi <[email protected]> Co-authored-by: stemy2 <[email protected]> Co-authored-by: Uthanien <[email protected]> * Update iar.blade.php - Fix in-app reg without hcaptcha (pixelfed#5807) (pixelfed#5808) * Staging (pixelfed#5674) * Update .env.docker Registry has changed. Old registry has been discontinued in August 2024. New Registry added, format of Docker tag has been adjusted as it now contains the Debian Release as well. Sample Version is set to current stable but can be adjusted to any of the available branches. * Update .env.docker Stick major.minor according to https://jippi.github.io/docker-pixelfed/customize/tags/#pixelfed-version Disable Debian Release Check until it's solved in dottie. Closes pixelfed#5264 * New translations web.php (Finnish) [ci skip] * New translations web.php (Finnish) [ci skip] * fix: don't restore memory limit after cities import Since this command can only be invoked by CLI, the process will exit after a successful import, so restoring the transient PHP memory limit doesn't really have any affect. In PHP 8.4, this throws the following error (which doesn't happen in 8.3 and below) > [entrypoint / 11-first-time-setup.sh] - (stderr) 128769/128769 [▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓] 100%[2025-01-20 11:29:23] production.ERROR: Failed to set memory limit to 134217728 bytes (Current memory usage is 134746112 bytes) {"exception":"[object] (ErrorException(code: 0): Failed to set memory limit to 134217728 bytes (Current memory usage is 134746112 bytes) at /var/www/app/Console/Commands/ImportCities.php:140) It seems to be a 8.4 behavior change, so removing the logic would make it go away * New translations web.php (Finnish) [ci skip] * New translations web.php (Finnish) [ci skip] * New translations web.php (Portuguese) [ci skip] * New translations web.php (Portuguese) [ci skip] * fix(compose-modal): avoid WebGL if it's not needed * fix(compose-modal): update webgl-media-editor * New translations web.php (Hungarian) [ci skip] * New translations web.php (Russian) [ci skip] * New translations web.php (Russian) [ci skip] * Update .env.example Adding the parameter INSTANCE_DISCOVER_PUBLIC="true" to prevent a HTTP 403 error at the explorer tab in the instance preview. * New variable for lang spanish * Variable for lang spanish * Update Dockerfile, fixes pixelfed#5535 pixelfed#5559 * Fix pixelfed#5582 * Fix pixelfed#5632 * Update status twitter:card to summary_large_image for images/albums * Update changelog --------- * Update iar.blade.php --------- Co-authored-by: Shlee <[email protected]> Co-authored-by: Lioh Moeller <[email protected]> Co-authored-by: Christian Winther <[email protected]> Co-authored-by: Taye Adeyemi <[email protected]> Co-authored-by: stemy2 <[email protected]> Co-authored-by: Uthanien <[email protected]> * fix register * 19 add analytics feature (#27) * feat-dev: analytics feature * upgrade version package * upgrach commit package.lock * change seguindo * fix link * fix conflics * update notifications * Add app register email verify resends * Update composer * Update changelog * Update IG import command * Add app register email verify resends (pixelfed#5814) * Update iar.blade.php - Fix in-app reg without hcaptcha (pixelfed#5807) * Staging (pixelfed#5674) * Update .env.docker Registry has changed. Old registry has been discontinued in August 2024. New Registry added, format of Docker tag has been adjusted as it now contains the Debian Release as well. Sample Version is set to current stable but can be adjusted to any of the available branches. * Update .env.docker Stick major.minor according to https://jippi.github.io/docker-pixelfed/customize/tags/#pixelfed-version Disable Debian Release Check until it's solved in dottie. Closes pixelfed#5264 * New translations web.php (Finnish) [ci skip] * New translations web.php (Finnish) [ci skip] * fix: don't restore memory limit after cities import Since this command can only be invoked by CLI, the process will exit after a successful import, so restoring the transient PHP memory limit doesn't really have any affect. In PHP 8.4, this throws the following error (which doesn't happen in 8.3 and below) > [entrypoint / 11-first-time-setup.sh] - (stderr) 128769/128769 [▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓] 100%[2025-01-20 11:29:23] production.ERROR: Failed to set memory limit to 134217728 bytes (Current memory usage is 134746112 bytes) {"exception":"[object] (ErrorException(code: 0): Failed to set memory limit to 134217728 bytes (Current memory usage is 134746112 bytes) at /var/www/app/Console/Commands/ImportCities.php:140) It seems to be a 8.4 behavior change, so removing the logic would make it go away * New translations web.php (Finnish) [ci skip] * New translations web.php (Finnish) [ci skip] * New translations web.php (Portuguese) [ci skip] * New translations web.php (Portuguese) [ci skip] * fix(compose-modal): avoid WebGL if it's not needed * fix(compose-modal): update webgl-media-editor * New translations web.php (Hungarian) [ci skip] * New translations web.php (Russian) [ci skip] * New translations web.php (Russian) [ci skip] * Update .env.example Adding the parameter INSTANCE_DISCOVER_PUBLIC="true" to prevent a HTTP 403 error at the explorer tab in the instance preview. * New variable for lang spanish * Variable for lang spanish * Update Dockerfile, fixes pixelfed#5535 pixelfed#5559 * Fix pixelfed#5582 * Fix pixelfed#5632 * Update status twitter:card to summary_large_image for images/albums * Update changelog --------- Co-authored-by: Lioh Moeller <[email protected]> Co-authored-by: Christian Winther <[email protected]> Co-authored-by: Taye Adeyemi <[email protected]> Co-authored-by: stemy2 <[email protected]> Co-authored-by: Uthanien <[email protected]> * Update iar.blade.php --------- Co-authored-by: daniel <[email protected]> Co-authored-by: Lioh Moeller <[email protected]> Co-authored-by: Christian Winther <[email protected]> Co-authored-by: Taye Adeyemi <[email protected]> Co-authored-by: stemy2 <[email protected]> Co-authored-by: Uthanien <[email protected]> * Add app register email verify resends * Update composer * Update changelog * Update IG import command --------- Co-authored-by: Shlee <[email protected]> Co-authored-by: Lioh Moeller <[email protected]> Co-authored-by: Christian Winther <[email protected]> Co-authored-by: Taye Adeyemi <[email protected]> Co-authored-by: stemy2 <[email protected]> Co-authored-by: Uthanien <[email protected]> * Update App Register to expire codes after 4 hours instead of 60 minutes * Update CHANGELOG.md * Update AppServiceProvider.php * Update AppRegisterController * update web vars * add missing keys * Update --------- Co-authored-by: root (Deneir) <root@deneir> Co-authored-by: Daniel Supernault <[email protected]> Co-authored-by: Dan Helfman <[email protected]> Co-authored-by: Lioh Moeller <[email protected]> Co-authored-by: Anil Kulkarni <[email protected]> Co-authored-by: Medformatik <[email protected]> Co-authored-by: Christian Winther <[email protected]> Co-authored-by: Simon Laux <[email protected]> Co-authored-by: Anil Kulkarni <[email protected]> Co-authored-by: Shlee <[email protected]> Co-authored-by: Taye Adeyemi <[email protected]> Co-authored-by: Mackenzie Morgan <[email protected]> Co-authored-by: Rm Yakovenko <[email protected]> Co-authored-by: tercean <[email protected]> Co-authored-by: stemy2 <[email protected]> Co-authored-by: Uthanien <[email protected]> Co-authored-by: Felipe Espinosa C. <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
To reproduce:
Expected:
scopeparameterActual:
scopeat allTechnically this is considered optional in the OAuth spec (only required if differed from the requested
scope), but it's useful for confirmation and most implementations I've encountered so far return itThe text was updated successfully, but these errors were encountered: