Skip to content

Commit

Permalink
gcs: reduce oauth scope requested as suggested by Google
Browse files Browse the repository at this point in the history
As part of getting the rclone oauth consent screen approved by Google,
it came up that the scope in use by the gcs backend was too large.

This change reduces it to the minimum scope which still allows rclone
to work correctly.

Old scope: https://www.googleapis.com/auth/devstorage.full_control
New scope: https://www.googleapis.com/auth/devstorage.read_write
  • Loading branch information
ncw committed Jun 27, 2019
1 parent fc44eb4 commit 9f4589a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion backend/googlecloudstorage/googlecloudstorage.go
Expand Up @@ -61,7 +61,7 @@ const (
var (
// Description of how to auth for this app
storageConfig = &oauth2.Config{
Scopes: []string{storage.DevstorageFullControlScope},
Scopes: []string{storage.DevstorageReadWriteScope},
Endpoint: google.Endpoint,
ClientID: rcloneClientID,
ClientSecret: obscure.MustReveal(rcloneEncryptedClientSecret),
Expand Down

0 comments on commit 9f4589a

Please sign in to comment.