Open drewler opened 2 years ago
I think this URL is only used during the "Authorization Code" grant:
_get_user_info
_get_authenticated_user
interactive_auth
inbox-auth
scriptSince this is not part of the main flow, updating this endpoint has lower priority and we can leave if for later.
https://github.com/closeio/sync-engine/blob/e19ff46f3ca8a1cb7fcfbdb6d0cc3cd10fe1a063/inbox/auth/microsoft.py#L37
Used in
_get_user_info
.https://graph.microsoft.com/v1.0/me
instead.User.Read
) is different from the ones inOAUTH_SCOPE
, I suggest the following approach:_get_user_info
inMicrosoftAuthHandler
, so it calls the parent method with a copy ofsession_dict
wheresession_dict["access_token"]
has been replaced with an access token with the right scope.User.Read
scope) has to be requested just before calling the parent method, using the AuthAlligator client.