search

XeroAPI / xero-python-oauth2-app

python app for demonstrating the xero-python SDK
MIT License
18 stars 30 forks source link

xero-python-oauth2-app Scope Checking Warning Flag fix #47

Open leegough opened 1 year ago

leegough commented 1 year ago

https://www.rfc-editor.org/rfc/rfc6749#section-3.3

OAuth library reference:

https://github.com/oauthlib/oauthlib/blob/564d526fdbdc32a936e4b5ddac186c26024f626b/oauthlib/oauth2/rfc6749/parameters.py#L466

Security considerations

Setting this variable indicates to Google to return different OAuth scopes than requested; Google is known to do this sometimes. IBM utilise this flag in OneDrive StoredIQ in production server instances. Reference:

https://www.ibm.com/support/pages/system/files/inline-files/$FILE/IBMSIQAdministratorAdminGuide76018.pdf