aboutsummaryrefslogtreecommitdiff
path: root/gn2/wqflask/oauth2/client.py
diff options
context:
space:
mode:
Diffstat (limited to 'gn2/wqflask/oauth2/client.py')
-rw-r--r--gn2/wqflask/oauth2/client.py5
1 files changed, 2 insertions, 3 deletions
diff --git a/gn2/wqflask/oauth2/client.py b/gn2/wqflask/oauth2/client.py
index a7d20f6b..a7b0099c 100644
--- a/gn2/wqflask/oauth2/client.py
+++ b/gn2/wqflask/oauth2/client.py
@@ -17,8 +17,7 @@ from authlib.integrations.requests_client import OAuth2Session
from gn2.wqflask.oauth2 import session
from gn2.wqflask.external_errors import ExternalRequestError
-SCOPE = ("profile group role resource register-client user masquerade "
- "introspect migrate-data")
+SCOPE = ("profile group role resource user masquerade introspect")
def authserver_uri():
"""Return URI to authorisation server."""
@@ -152,7 +151,7 @@ def oauth2_client():
client = OAuth2Session(
oauth2_clientid(),
oauth2_clientsecret(),
- scope=SCOPE,
+ scope=token["scope"],
token_endpoint=urljoin(authserver_uri(), "auth/token"),
token_endpoint_auth_method="client_secret_post",
token=token,