che
che copied to clipboard
Check scopes while validating a Personal Access Token
Is your enhancement related to a problem? Please describe
Currently when validating GitHub and GitLab Personal Access Tokens we do not check their scopes to match the predefined scopes list.
Describe the solution you'd like
- To validate a GitHub PAT use the same function which we use when validating an OAuth token
- For GitLab use
<gitlab endpoint>/api/v4/personal_access_tokens/selfrequest
Describe alternatives you've considered
No response
Additional context
No response
Issues go stale after 180 days of inactivity. lifecycle/stale issues rot after an additional 7 days of inactivity and eventually close.
Mark the issue as fresh with /remove-lifecycle stale in a new comment.
If this issue is safe to close now please do so.
Moderators: Add lifecycle/frozen label to avoid stale mode.
/remove-lifecycle stale