add scopes

dust-tt · Nov 18, 2024 · 10a9a1a · 10a9a1a
1 parent 8a9f80f
commit 10a9a1a
Show file tree

Hide file tree

Showing 5 changed files with 15 additions and 4 deletions.
diff --git a/extension/app/background.ts b/extension/app/background.ts
@@ -267,7 +267,7 @@ const authenticate = async (
     client_id: AUTH0_CLIENT_ID,
     response_type: "code",
     scope:
-      "offline_access read:user_profile read:conversation create:conversation update:conversation read:agent",
+      "offline_access read:user_profile read:conversation create:conversation update:conversation read:agent read:file create:file delete:file",
     redirect_uri: redirectUrl,
     audience: DUST_API_AUDIENCE,
     code_challenge_method: "S256",

diff --git a/front/pages/api/v1/w/[wId]/assistant/conversations/[cId]/cancel.ts b/front/pages/api/v1/w/[wId]/assistant/conversations/[cId]/cancel.ts
@@ -116,4 +116,5 @@ async function handler(
 
 export default withPublicAPIAuthentication(handler, {
   isStreaming: true,
+  requiredScopes: { POST: "update:conversation" },
 });
diff --git a/front/pages/api/v1/w/[wId]/assistant/conversations/[cId]/content_fragments.ts b/front/pages/api/v1/w/[wId]/assistant/conversations/[cId]/content_fragments.ts
@@ -142,4 +142,6 @@ async function handler(
   }
 }
 
-export default withPublicAPIAuthentication(handler);
+export default withPublicAPIAuthentication(handler, {
+  requiredScopes: { POST: "update:conversation" },
+});
diff --git a/front/pages/api/v1/w/[wId]/files/[fileId].ts b/front/pages/api/v1/w/[wId]/files/[fileId].ts
@@ -123,4 +123,10 @@ async function handler(
   }
 }
 
-export default withPublicAPIAuthentication(handler);
+export default withPublicAPIAuthentication(handler, {
+  requiredScopes: {
+    GET: "read:file",
+    POST: "create:file",
+    DELETE: "delete:file",
+  },
+});
diff --git a/front/pages/api/v1/w/[wId]/files/index.ts b/front/pages/api/v1/w/[wId]/files/index.ts
@@ -167,4 +167,6 @@ async function handler(
   }
 }
 
-export default withPublicAPIAuthentication(handler);
+export default withPublicAPIAuthentication(handler, {
+  requiredScopes: { POST: "create:file" },
+});