Skip to content

config: fix figgy-config for default params#127

Closed
zkat wants to merge 1 commit intorelease-nextfrom
zkat/audit-auth
Closed

config: fix figgy-config for default params#127
zkat wants to merge 1 commit intorelease-nextfrom
zkat/audit-auth

Conversation

@zkat
Copy link
Copy Markdown
Contributor

@zkat zkat commented Dec 18, 2018

Fixes: https://npm.community/t/npm-audit-error-messaging-update-for-401s/3983

Note: We should probably release this PR as part of 6.6.0

@zkat zkat added the semver:patch semver patch level for changes label Dec 18, 2018
@zkat zkat requested a review from a team as a code owner December 18, 2018 20:23
@zkat
Copy link
Copy Markdown
Contributor Author

zkat commented Dec 18, 2018

Nevermind, this was not necessary, and I was barking up the wrong tree. Things are working fine.

@zkat zkat closed this Dec 18, 2018
@zkat zkat deleted the zkat/audit-auth branch December 18, 2018 21:38
Jah-yee pushed a commit to Jah-yee/cli that referenced this pull request Apr 16, 2026
…#119) (npm#127)

Admin-only scopes (apps.*, cloud-identity.*, ediscovery, directory.readonly,
groups) require Workspace domain-admin access and cannot be granted to personal
@gmail.com accounts — Google returns 400 invalid_scope when they're included.

Changes:
- Add is_workspace_admin_scope() helper (mirrors is_app_only_scope())
  to identify scopes that fail for personal Google accounts
- Exclude these scopes from the template_selects of the 'Recommended' preset
  in run_discovery_scope_picker()
- Exclude them from the resolved scope list when the Recommended template
  is confirmed
- Add 8 unit tests covering the new helper

Workspace admins can still access these scopes via 'Full Access' template
or by selecting them individually in the picker.

Note: this is complementary to PR npm#108 which filters alertcenter scopes
at the API-discovery level. This PR handles the broader set at the
recommendation layer.

Addresses npm#119 (Bug 1: admin scopes in Recommended preset)

Co-authored-by: Claude <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

semver:patch semver patch level for changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant