vbatts/registry
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Update scope list to use space separator

Browse source 
The oauth spec defines using a space to separate parts of a scope.
To better comply with future implementations built on oauth use a space to separate the resource scopes.

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
This commit is contained in:
Derek McGowan 2016-03-03 17:38:12 -08:00
parent d51f76f903
commit 66d6eaa83f
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
docs/spec/auth/scope.md
View file

@ -74,18 +74,18 @@ a refresh token the passed in audience must match the audience defined for
the refresh token. The audience (resource provider) is provided using the
`service` field. Multiple resource scopes may be provided using multiple `scope`
fields on the `GET` request. The `POST` request only takes in a single
`scope` field but may use the resource scope list format to specify
multiple resource scopes.
`scope` field but may use a space to separate a list of multiple resource
scopes.
### Resource Scope Grammar
```
resourcescopelist := resourcescope [ ',' action ]* [ ',' resourcescope]*
resourcescope := resourcetype ":" resourcename ":" action
scope := resourcescope [ ' ' resourcescope ]*
resourcescope := resourcetype ":" resourcename ":" action [ ',' action ]*
resourcetype := /[a-z]*/
resourcename := component [ '/' component ]*
action := /[a-z]*/
component := alpha-numeric [separator alpha-numeric]*
component := alpha-numeric [ separator alpha-numeric ]*
alpha-numeric := /[a-z0-9]+/
separator := /[_.]|__|[-]*/
```