fix: correct oauth scopes ec1b55af
Steve · 2026-02-26 21:58 2 file(s) · +3 −3
docs/src/lib/oauth-client.ts +1 −1
19 19
			redirect_uris: [redirectUri],
20 20
			grant_types: ["authorization_code", "refresh_token"],
21 21
			response_types: ["code"],
22 -
			scope: "atproto site.standard.graph.subscription",
22 +
			scope: "atproto repo:site.standard.graph.subscription?action=create",
23 23
			token_endpoint_auth_method: "none",
24 24
			application_type: "web",
25 25
			dpop_bound_access_tokens: true,
docs/src/routes/auth.ts +2 −2
27 27
		redirect_uris: [redirectUri],
28 28
		grant_types: ["authorization_code", "refresh_token"],
29 29
		response_types: ["code"],
30 -
		scope: "atproto site.standard.graph.subscription",
30 +
		scope: "atproto repo:site.standard.graph.subscription?action=create",
31 31
		token_endpoint_auth_method: "none",
32 32
		application_type: "web",
33 33
		dpop_bound_access_tokens: true,
44 44
45 45
		const client = createOAuthClient(c.env.SEQUOIA_SESSIONS, c.env.CLIENT_URL);
46 46
		const authUrl = await client.authorize(handle, {
47 -
			scope: "atproto site.standard.graph.subscription",
47 +
			scope: "atproto repo:site.standard.graph.subscription?action=create",
48 48
		});
49 49
50 50
		return c.redirect(authUrl.toString());