Fix Doorkeeper scopes for user APIs

openstax · Oct 21, 2024 · 43c1a43 · 43c1a43
1 parent bea8b11
commit 43c1a43
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/controllers/api/v1/users_controller.rb b/app/controllers/api/v1/users_controller.rb
@@ -264,7 +264,7 @@ def get_sso_token(application, user)
     access_token = Doorkeeper::AccessToken.find_or_create_for(
       application: application,
       resource_owner: user.id,
-      scopes: '',
+      scopes: 'all',
       expires_in: SSO_TOKEN_INITIAL_DURATION,
       use_refresh_token: false,
     )
@@ -278,7 +278,7 @@ def get_sso_token(application, user)
     access_token = Doorkeeper::AccessToken.create_for(
       application: application.id,
       resource_owner: user.id,
-      scopes: '',
+      scopes: 'all',
       expires_in: SSO_TOKEN_INITIAL_DURATION,
       use_refresh_token: false
     )