Microsoft/vscode
1
0
Fork 0
mirror of https://github.com/microsoft/vscode.git synced 2026-03-02 14:58:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix scope checking mismatch (#109665)

Browse Source
This commit is contained in:
Alex Ross
2020-10-30 01:05:21 +01:00
committed by GitHub
parent 47bbc2f8e7
commit 04863391e9
1 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
extensions/github-authentication/src/githubServer.ts
View File

@@ -56,9 +56,18 @@ export class GitHubServer {
const token = await vscode.window.showInputBox({ prompt: 'GitHub Personal Access Token', ignoreFocusOut: true });
if (!token) { throw new Error('Sign in failed: No token provided'); }
const tokenScopes = await this.getScopes(token);
const scopesList = scopes.split(' ');
if (!scopesList.every(scope => tokenScopes.includes(scope))) {
const tokenScopes = await this.getScopes(token); // Example: ['repo', 'user']
const scopesList = scopes.split(' '); // Example: 'read:user repo user:email'
if (!scopesList.every(scope => {
const included = tokenScopes.includes(scope);
if (included || !scope.includes(':')) {
return included;
}
return scope.split(':').some(splitScopes => {
return tokenScopes.includes(splitScopes);
});
})) {
throw new Error(`The provided token is does not match the requested scopes: ${scopes}`);
}