3 Commits

Author	SHA1	Message	Date
Min RK	7a9778249f	run pre-commit with isort	2022-03-31 12:33:26 +02:00
Min RK	d2eaf90df2	authorize subsets of roles ... - oauth clients can request a list of roles - authorization will proceed with the _subset_ of those roles held by the user - in the future, this subsetting will be refined to the scope level	2022-03-15 11:54:42 +01:00
Min RK	fdf23600c0	allow custom scopes ... defined with c.JupyterHub.custom_scopes = { 'custom:scope': {'description': "text shown on oauth confirm"} } Allows injecting custom scopes to roles, allowing extension of granular permissions to service-defined custom scopes. Custom scopes: - MUST start with `custom:` - MUST only contain ascii lowercase, numbers, colon, hyphen, asterisk, underscore - MUST define a `description` - MAY also define `subscopes` list(s), each of which must also be explicitly defined HubAuth can be used to retrieve and check for custom scopes to authorize requests.	2022-03-11 11:37:26 +01:00