Feature: Allow token introspection without read scope (#27142)

2023-10-18 14:10:07 +02:00
parent 4612576c68
commit 7c3fea7275
3 changed files with 79 additions and 6 deletions
--- a/app/serializers/rest/application_serializer.rb
+++ b/app/serializers/rest/application_serializer.rb
@@ -1,7 +1,7 @@
 # frozen_string_literal: true

 class REST::ApplicationSerializer < ActiveModel::Serializer
-  attributes :id, :name, :website, :redirect_uri,
+  attributes :id, :name, :website, :scopes, :redirect_uri,
             :client_id, :client_secret, :vapid_key

  def id