scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-10-05 02:41:34 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

chore(oauth): trim DCR scope comment per review feedback

Browse source 
Shortens the inline comment per review feedback on #25958.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Jian-Min Lin 2026-06-12 07:08:10 +08:00
parent beb38e255f
commit 47db07dbc0
1 changed files with 2 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
backend/open_webui/utils/oauth.py
View file

@ -437,12 +437,8 @@ async def get_oauth_client_info_with_dynamic_client_registration(
resource = resource_metadata.resource
# Prefer the resource-specific scopes from the Protected Resource Metadata
# (RFC 9728 Section 2) over the Authorization Server's scopes_supported
# (RFC 8414 Section 2). The AS scopes_supported is a full catalog of every
# scope the server can grant across all resources, whereas the PRM
# scopes_supported represents what this specific resource requires - making
# it the correct, least-privilege source. This mirrors the static-credentials
# flow (see #24690).
# (RFC 9728) over the AS's full scopes_supported catalog, for least
# privilege. Mirrors the static-credentials flow (#24690).
if resource_metadata.scopes_supported:
oauth_client_metadata.scope = ' '.join(resource_metadata.scopes_supported)