Drop the full products scope the Console does not accept

The Console's product APIs accept user, user:read and products:read only
(decision 21 names products:read). A token with just "products" was
refused everywhere despite its consent text.
This commit is contained in:
Maurice Preuß committed 2026-11-05 00:11:35 +01:00
1 parent d99512a359
commit e8432df997
5 files changed
+16 -11

No files matched your search

+2 -2
View File
@@ -36,8 +36,8 @@ class Scope
const SSH_KEYS = 'ssh-keys';
const SSH_KEYS_READ = 'ssh-keys:read';
// Products of the Anikeen Console (servers, floating IPs, hosting, domains, zones, object storage).
const PRODUCTS = 'products';
// Products of the Anikeen Console (servers, floating IPs, hosting, domains, zones, object storage),
// read-only. Changing products needs `user`; there is no full `products` scope.
const PRODUCTS_READ = 'products:read';
// Reseller API of the Anikeen Console. A full scope includes reading; `user` and `*` do not