Skip to content

Correct api server token scopes#248

Merged
dkhalife merged 4 commits intomainfrom
prm
Mar 19, 2026
Merged

Correct api server token scopes#248
dkhalife merged 4 commits intomainfrom
prm

Conversation

@dkhalife
Copy link
Owner

No description provided.

Copilot AI review requested due to automatic review settings March 19, 2026 00:43
@dkhalife dkhalife enabled auto-merge (squash) March 19, 2026 00:43
@dkhalife dkhalife merged commit e6c8660 into main Mar 19, 2026
10 checks passed
@dkhalife dkhalife deleted the prm branch March 19, 2026 00:46
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Aligns Task Wizard’s OAuth scope strings with the Entra-style Resource/ScopeName pattern (e.g., Tasks.Read) so MCP and server-side scope constants match the scopes clients request.

Changes:

  • Updated MCP server ScopesSupported to use User.Read, Labels.*, and Tasks.* scope names.
  • Renamed API server ApiTokenScope constants from task:read-style to Tasks.Read-style.
  • Updated API token feature documentation to reflect the new scope naming.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File Description
mcpserver/Program.cs Updates advertised OAuth scopes for the MCP server to Entra-style scope names.
apiserver/internal/models/user.go Renames API token scope constants to *.Read/*.Write naming.
.agents/features/api-tokens.md Updates documented scope names (but currently includes an unimplemented scope).


- Create named API tokens with an expiration date
- Scoped permissions: task:read, task:write, label:read, label:write, dav:read, dav:write, user:read, user:write, token:write
- Scoped permissions: Tasks.Read, Tasks.Write, Labels.Read, Labels.Write, Dav.Read, Dav.Write, User.Read, User.Write, Tokens.Write
@codecov
Copy link

codecov bot commented Mar 19, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants