bumi
/
tinyforms
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Limit google oauth scope 

we only need access to the tinyforms created sheets
This commit is contained in:
bumi 2020-05-08 14:38:18 +02:00
parent 9f591d12a0
commit 937eca9f79
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
config/initializers/sorcery.rb
View File

@ -156,7 +156,7 @@ Rails.application.config.sorcery.configure do |config|
config.google.secret = ENV['GOOGLE_CLIENT_SECRET']
config.google.callback_url = (ENV['GOOGLE_AUTH_CALLBACK_URL'] || 'http://localhost:3000/oauth/callback?provider=google')
config.google.user_info_mapping = { email: 'email', name: 'name', google_id: 'id' }
config.google.scope = 'https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/auth/spreadsheets'
config.google.scope = 'https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/auth/drive.file'
config.google.auth_url = '/o/oauth2/auth?access_type=offline&include_granted_scopes=true'
#
# For Microsoft Graph, the key will be your App ID, and the secret will be your app password/public key.