search

GoogleCloudPlatform / gcs-oauth2-boto-plugin

Auth plugin allowing use the use of OAuth 2.0 credentials for Google Cloud Storage in the Boto library.
Apache License 2.0
21 stars 38 forks source link

OAuth2Auth will create a OAuth2GCEClient even if it is authorized for no scopes. #12

Open thobrla opened 9 years ago

thobrla commented 9 years ago

https://github.com/GoogleCloudPlatform/gcs-oauth2-boto-plugin/blob/master/gcs_oauth2_boto_plugin/oauth2_plugin.py#L38 doesn't do any checking of the scopes that the resulting OAuth2GCEClient supports. Thus, if a GCE VM is created with no scopes, we'll return an OAuth2Auth handler that looks like a valid credential but in actuality can't access anything.