From 9f4589a997c355f7946db1535da75424b7536d6f Mon Sep 17 00:00:00 2001 From: Nick Craig-Wood Date: Thu, 27 Jun 2019 11:53:25 +0100 Subject: [PATCH] gcs: reduce oauth scope requested as suggested by Google As part of getting the rclone oauth consent screen approved by Google, it came up that the scope in use by the gcs backend was too large. This change reduces it to the minimum scope which still allows rclone to work correctly. Old scope: https://www.googleapis.com/auth/devstorage.full_control New scope: https://www.googleapis.com/auth/devstorage.read_write --- backend/googlecloudstorage/googlecloudstorage.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/googlecloudstorage/googlecloudstorage.go b/backend/googlecloudstorage/googlecloudstorage.go index 9b613529fde0c..9412d1f367d1e 100644 --- a/backend/googlecloudstorage/googlecloudstorage.go +++ b/backend/googlecloudstorage/googlecloudstorage.go @@ -61,7 +61,7 @@ const ( var ( // Description of how to auth for this app storageConfig = &oauth2.Config{ - Scopes: []string{storage.DevstorageFullControlScope}, + Scopes: []string{storage.DevstorageReadWriteScope}, Endpoint: google.Endpoint, ClientID: rcloneClientID, ClientSecret: obscure.MustReveal(rcloneEncryptedClientSecret),