From 0a20628abb215386b97868420e21f97d6f10113f Mon Sep 17 00:00:00 2001 From: coyotte508 Date: Thu, 23 Oct 2025 11:58:55 +0200 Subject: [PATCH 1/5] document new scopes --- docs/hub/oauth.md | 5 ++++- docs/hub/spaces-oauth.md | 5 ++++- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/docs/hub/oauth.md b/docs/hub/oauth.md index 5e68ea545..b68120455 100644 --- a/docs/hub/oauth.md +++ b/docs/hub/oauth.md @@ -30,9 +30,12 @@ The currently supported scopes are: - `email`: Get the user's email address. - `read-billing`: Know whether the user has a payment method set up. - `read-repos`: Get read access to the user's personal repos. +- `contribute-repos`: Create repos, and have access to the repos created by this app. Cannot access other repos by default. - `write-repos`: Get write/read access to the user's personal repos. - `manage-repos`: Get full access to the user's personal repos. Also grants repo creation and deletion. -- `inference-api`: Get access to the [Inference API](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user. +- `inference-api`: Get access to the [Inference Providers](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user. +- `jobs`: Run [jobs](https://huggingface.co/docs/huggingface_hub/main/en/guides/jobs) +- `webhooks`: Manage [webhooks](https://huggingface.co/docs/huggingface_hub/main/en/guides/webhooks) - `write-discussions`: Open discussions and Pull Requests on behalf of the user as well as interact with discussions (including reactions, posting/editing comments, closing discussions, ...). To open Pull Requests on private repos, you need to request the `read-repos` scope as well. All other information is available in the [OpenID metadata](https://huggingface.co/.well-known/openid-configuration). diff --git a/docs/hub/spaces-oauth.md b/docs/hub/spaces-oauth.md index f711a2c77..3bef9f830 100644 --- a/docs/hub/spaces-oauth.md +++ b/docs/hub/spaces-oauth.md @@ -73,9 +73,12 @@ Those scopes are optional and can be added by setting `hf_oauth_scopes` in your - `email`: Get the user's email address. - `read-billing`: Know whether the user has a payment method set up. - `read-repos`: Get read access to the user's personal repos. +- `contribute-repos`: Create repos, and have access to the repos created by this app. Cannot access other repos by default. - `write-repos`: Get write/read access to the user's personal repos. - `manage-repos`: Get full access to the user's personal repos. Also grants repo creation and deletion. -- `inference-api`: Get access to the [Inference API](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user. +- `inference-api`: Get access to the [Inference Providers](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user. +- `jobs`: Run [jobs](https://huggingface.co/docs/huggingface_hub/main/en/guides/jobs) +- `webhooks`: Manage [webhooks](https://huggingface.co/docs/huggingface_hub/main/en/guides/webhooks) - `write-discussions`: Open discussions and Pull Requests on behalf of the user as well as interact with discussions (including reactions, posting/editing comments, closing discussions, ...). To open Pull Requests on private repos, you need to request the `read-repos` scope as well. ## Accessing organization resources From 45de71a82211b8e8a0371545c63a22bbfec872cb Mon Sep 17 00:00:00 2001 From: "Eliott C." Date: Thu, 23 Oct 2025 12:15:39 +0200 Subject: [PATCH 2/5] Update docs/hub/oauth.md Co-authored-by: Julien Chaumond --- docs/hub/oauth.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/hub/oauth.md b/docs/hub/oauth.md index b68120455..437ceb070 100644 --- a/docs/hub/oauth.md +++ b/docs/hub/oauth.md @@ -30,7 +30,7 @@ The currently supported scopes are: - `email`: Get the user's email address. - `read-billing`: Know whether the user has a payment method set up. - `read-repos`: Get read access to the user's personal repos. -- `contribute-repos`: Create repos, and have access to the repos created by this app. Cannot access other repos by default. +- `contribute-repos`: Create repos, and have access to the repos created by this app. Cannot access other repos (unless other permissions are granted). - `write-repos`: Get write/read access to the user's personal repos. - `manage-repos`: Get full access to the user's personal repos. Also grants repo creation and deletion. - `inference-api`: Get access to the [Inference Providers](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user. From fb2e8a178872fe1ccbb565b7f38655798985ce67 Mon Sep 17 00:00:00 2001 From: "Eliott C." Date: Thu, 23 Oct 2025 12:16:07 +0200 Subject: [PATCH 3/5] Update docs/hub/spaces-oauth.md --- docs/hub/spaces-oauth.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/hub/spaces-oauth.md b/docs/hub/spaces-oauth.md index 3bef9f830..458913843 100644 --- a/docs/hub/spaces-oauth.md +++ b/docs/hub/spaces-oauth.md @@ -73,7 +73,7 @@ Those scopes are optional and can be added by setting `hf_oauth_scopes` in your - `email`: Get the user's email address. - `read-billing`: Know whether the user has a payment method set up. - `read-repos`: Get read access to the user's personal repos. -- `contribute-repos`: Create repos, and have access to the repos created by this app. Cannot access other repos by default. +- `contribute-repos`: Create repos, and have access to the repos created by this app. Cannot access other repos (unless other permissions are granted). - `write-repos`: Get write/read access to the user's personal repos. - `manage-repos`: Get full access to the user's personal repos. Also grants repo creation and deletion. - `inference-api`: Get access to the [Inference Providers](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user. From a865bff62ae6b2ec69509c8c146e456075d26eeb Mon Sep 17 00:00:00 2001 From: "Eliott C." Date: Thu, 23 Oct 2025 14:33:32 +0200 Subject: [PATCH 4/5] Update docs/hub/oauth.md Co-authored-by: vb --- docs/hub/oauth.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/hub/oauth.md b/docs/hub/oauth.md index 437ceb070..18e64fe73 100644 --- a/docs/hub/oauth.md +++ b/docs/hub/oauth.md @@ -30,7 +30,7 @@ The currently supported scopes are: - `email`: Get the user's email address. - `read-billing`: Know whether the user has a payment method set up. - `read-repos`: Get read access to the user's personal repos. -- `contribute-repos`: Create repos, and have access to the repos created by this app. Cannot access other repos (unless other permissions are granted). +- `contribute-repos`: Can create repositories and access those created by this app. Cannot access any other repositories unless additional permissions are granted. - `write-repos`: Get write/read access to the user's personal repos. - `manage-repos`: Get full access to the user's personal repos. Also grants repo creation and deletion. - `inference-api`: Get access to the [Inference Providers](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user. From 41e7bdc122d706db4bccb94ef543ee7e3a2de31b Mon Sep 17 00:00:00 2001 From: "Eliott C." Date: Thu, 23 Oct 2025 14:33:57 +0200 Subject: [PATCH 5/5] Apply suggestion from @coyotte508 --- docs/hub/spaces-oauth.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/hub/spaces-oauth.md b/docs/hub/spaces-oauth.md index 458913843..d6b2a5cf1 100644 --- a/docs/hub/spaces-oauth.md +++ b/docs/hub/spaces-oauth.md @@ -73,7 +73,7 @@ Those scopes are optional and can be added by setting `hf_oauth_scopes` in your - `email`: Get the user's email address. - `read-billing`: Know whether the user has a payment method set up. - `read-repos`: Get read access to the user's personal repos. -- `contribute-repos`: Create repos, and have access to the repos created by this app. Cannot access other repos (unless other permissions are granted). +- `contribute-repos`: Can create repositories and access those created by this app. Cannot access any other repositories unless additional permissions are granted. - `write-repos`: Get write/read access to the user's personal repos. - `manage-repos`: Get full access to the user's personal repos. Also grants repo creation and deletion. - `inference-api`: Get access to the [Inference Providers](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user.