cloudfoundry / uaa-cli

CLI for UAA written in Go
Apache License 2.0
21 stars 14 forks source link

UAA CLI not validating scopes #27

Open x64bytes opened 6 years ago

x64bytes commented 6 years ago

This is similar PR opened for UAAC at https://github.com/cloudfoundry/cf-uaac/issues/64

When creating a client using the latest build of UAA, the scopes are not validated. The UAA is creating the scope with any string we give rather than validating the scopes existence within UAA. Is it any limitation that UAA has to validate scopes?, as grant types are being validated by the CLI at the same time.

cf-gitbot commented 6 years ago

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/159444400

The labels on this github issue will be updated when the story is started.