Min RK 3076845927 tokens have scopes ...

instead of roles, which allow tokens to change permissions over time

This is mostly a low-level change,
with little outward-facing effects.

- on upgrade, evaluate all token role assignments to their current scopes,
  and store those scopes on the tokens
- assigning roles to tokens still works, but scopes are evaluated and validated immediately,
  rather than lazily stored as roles
- no longer need to check for role permission changes on startup, because token permissions aren't affected
- move a few scope utilities from roles to scopes
- oauth allows specifying scopes, not just roles.
  But these are still at the level specified in roles,
  not fully-resolved scopes.
- more granular APIs for working with scopes and roles

2022-03-18 14:13:16 +01:00

..

docker-db.sh

Fix mysql/postgresql auth and comment struggles

2020-11-10 19:20:47 +01:00

init-db.sh

tokens have scopes

2022-03-18 14:13:16 +01:00