Include requested scopes in oauth client registration

This can be used on the oauth server side to enforce that no additional scopes are added.
2025-06-03 01:41:42 +02:00
parent 145dda8c19
commit ea75d8e832
1 changed files with 1 additions and 0 deletions
--- a/snikket_web/prosodyclient.py
+++ b/snikket_web/prosodyclient.py
@@ -474,6 +474,7 @@ class ProsodyClient:
            ],
            "grant_types": ["password"],
            "response_types": ["code"],
+            "scope": " ".join([SCOPE_RESTRICTED, SCOPE_DEFAULT, SCOPE_ADMIN]),
            "software_version": _version.version,
        }
        async with self._plain_session as session: