chore: scoped oauth b00a8ca3
Steve · 2026-01-09 22:57 1 file(s) · +2 −2
packages/server/src/routes/guest-auth.ts +2 −2
44 44 
		redirect_uris: [redirectUri],
45 45 
		grant_types: ["authorization_code", "refresh_token"],
46 46 
		response_types: ["code"],
47 - 
		scope: "atproto transition:generic",
47 + 
		scope: "atproto repo:site.standard.document.comment?action=create",
48 48 
		token_endpoint_auth_method: "none",
49 49 
		application_type: "web",
50 50 
		dpop_bound_access_tokens: true,
78 78 
			state,
79 79 
			pkce,
80 80 
			dpopKeyPair,
81 - 
			"atproto transition:generic",
81 + 
			"atproto repo:site.standard.document.comment?action=create",
82 82 
		);
83 83 

            

            
            

                84
                84
                 
                
		// Store auth state in KV with returnTo URL