Change from API scope to read_user, so we only have read access (#10225)

[FIX] GitLab authentication scope was too open, reduced to read only access
RocketChat · Apr 17, 2018 · 2de1530 · 2de1530
1 parent 34e607c
commit 2de1530
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/rocketchat-gitlab/common.js b/packages/rocketchat-gitlab/common.js
@@ -2,7 +2,7 @@
 const config = {
 	serverURL: 'https://gitlab.com',
 	identityPath: '/api/v3/user',
-	scope: 'api',
+	scope: 'read_user',
 	addAutopublishFields: {
 		forLoggedInUser: ['services.gitlab'],
 		forOtherUsers: ['services.gitlab.username']