• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

strongloop / loopback
89%
master: 90%

Build:
Build:
LAST BUILD BRANCH: chore/update-lts
DEFAULT BRANCH: master
Repo Added 31 Jan 2017 11:54AM UTC
Files 36
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH feature/access-token-scopes
branch: feature/access-token-scopes
CHANGE BRANCH
x
Reset
  • feature/access-token-scopes
  • 2.x
  • 2.x-backport
  • 2.x-eol
  • 2.x-latest
  • 3.x-latest
  • 3.x/update-dependencies
  • acl-apidoc-fix
  • add-codeowner
  • add-node-10
  • add-validate-updateAll
  • backport/babel-es6-to-es5
  • backport/do-not-allow-duplicate-role-names
  • bajtos-patch-1
  • catch-err
  • change-status
  • chore/add-node-12
  • chore/improve-issue-templates
  • chore/update-juggler
  • copyright
  • copyrights
  • create-issue-pr-templates
  • declarative-nest-remoting
  • disable-context-tests
  • drop-node-4x
  • drop/node-0x
  • empty-password-lb3
  • empty_password
  • eol
  • feat/maintenance-lts
  • feature/access-scopes
  • feature/change-password-api
  • feature/detectUserConfig
  • feature/enable-email-verification-replay
  • feature/object-storage
  • feature/refactor-access-token-id
  • feature/remove-model
  • feature/set-password-with-token
  • fix-acl
  • fix-comma-dangle
  • fix-crash-when-replacing-unknown-user
  • fix-create-id
  • fix-dep
  • fix-lint
  • fix-npm-audit
  • fix-translation
  • fix/build
  • fix/build-2x
  • fix/change-password-multiple-users
  • fix/change-password-validation
  • fix/ci
  • fix/crash-in-verifyUserRelations
  • fix/dangling-promise-in-test
  • fix/debug-statements
  • fix/diff-remoting
  • fix/eslint-issues
  • fix/get-access-context-user
  • fix/multi-user-reset-password
  • fix/options-in-token-invalidations
  • fix/options-in-token-invalidations-master
  • fix/principal-type-polymorphic-user
  • fix/role-acl-with-multiple-users
  • fix/setRemote-updateAll
  • fix/travis-config
  • fix/unauthorized-current-user-literal-2x
  • fix/windows-ci
  • fixFilterDef
  • fix_type
  • ignore-failing-downstream-builds
  • improve/github-templates
  • juggler-version
  • license
  • lts
  • maintenance/passing-context-options-in-user.verify
  • master
  • nestRemoting/prevent-endless-relation-recursion
  • npm-test
  • persisted-model/fix-updateonly-props-check
  • production
  • remove/lehni
  • revert-3541-add-validate-updateAll
  • set-default-remote-options
  • speed-up-acl-tests
  • string-username-email
  • test-branch
  • test-ci
  • test-readme
  • translate
  • travis
  • update-dependencies
  • update-dev-deps
  • update-eslint-config
  • update-juggler
  • update-juggler-2
  • update-karma-nyc
  • update-lts
  • update-msg
  • update-strong-error-handler
  • update-strong-globalize
  • update/travis-platforms
  • updateonly_feature
  • upgrade-nodemailer
  • v2.38.2
  • v2.38.3
  • v2.39.0
  • v2.39.1
  • v2.39.2
  • v2.41.1
  • v2.41.2
  • v2.42.0
  • v3.10.0
  • v3.10.1
  • v3.11.0
  • v3.11.1
  • v3.12.0
  • v3.13.0
  • v3.14.0
  • v3.15.0
  • v3.16.0
  • v3.16.1
  • v3.16.2
  • v3.17.0
  • v3.17.1
  • v3.18.0
  • v3.18.1
  • v3.18.2
  • v3.18.3
  • v3.19.0
  • v3.19.1
  • v3.19.2
  • v3.19.3
  • v3.20.0
  • v3.21.0
  • v3.22.0
  • v3.22.1
  • v3.22.2
  • v3.22.3
  • v3.23.0
  • v3.23.1
  • v3.23.2
  • v3.24.0
  • v3.24.1
  • v3.24.2
  • v3.25.0
  • v3.25.1
  • v3.26.0
  • v3.27.0
  • v3.28.0
  • v3.5.0
  • v3.6.0
  • v3.7.0
  • v3.8.0
  • v3.9.0
  • welcome-lehni
  • welcome-nitro404
  • welcome-zbarbuto

pending completion
5639

push

travis-ci

bajtos
Add support for scoped access tokens

Define a new property `AccessToken.scopes` to contain the list of
scopes granted to this access token.

Define a new remote method metadata `accessScopes` to contain a list
of scope name required by this method.

Define a special built-in scope name "DEFAULT" that's used when
a method/token does not provide any scopes. This allows access
tokens to grant access to both the default scope and any additional
custom scopes at the same time.

Modify the authorization algorithm to ensure that at least one
of the scopes required by a remote method is allowed by the scopes
granted to the requesting access token.

The "DEFAULT" scope preserve backwards compatibility because existing
remote methods with no `accessScopes` can be accessed by (existing)
access tokens with no `scopes` defined.

Impact on existing applications:

 - Database schema must be updated after upgrading the loopback version

 - If the application was already using a custom `AccessToken.scopes`
   property with a type different from an array, then the relevant code
   must be updated to work with the new type "array of strings".

1711 of 2160 branches covered (79.21%)

26 of 26 new or added lines in 2 files covered. (100.0%)

3143 of 3516 relevant lines covered (89.39%)

6146.98 hits per line

Relevant lines Covered
Build:
Build:
3516 RELEVANT LINES 3143 COVERED LINES
6146.98 HITS PER LINE
Source Files on feature/access-token-scopes
  • List 0
  • Changed 5
  • Source Changed 2
  • Coverage Changed 5
Coverage ∆ File Lines Relevant Covered Missed Hits/Line Branch Hits Branch Misses

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
5639 feature/access-token-scopes Add support for scoped access tokens Define a new property `AccessToken.scopes` to contain the list of scopes granted to this access token. Define a new remote method metadata `accessScopes` to contain a list of scope name required by this metho... push 07 Apr 2017 11:09AM UTC bajtos travis-ci pending completion  
5635 feature/access-token-scopes Code cleanup Make it easier to add method/app-level scopes in the future push 06 Apr 2017 11:40AM UTC bajtos travis-ci pending completion  
5633 feature/access-token-scopes Add support for scoped access tokens Define a new property `AccessToken.scopes` to contain the list of scopes granted to this access token. Define a new remote method metadata `accessScopes` to contain a list of scope name required by this metho... push 06 Apr 2017 11:17AM UTC bajtos travis-ci pending completion  
5623 feature/access-token-scopes Add support for scoped access tokens Define a new property `AccessToken.scopes` to contain the list of scopes granted to this access token. Define a new remote method metadata `accessScopes` to contain a list of scope name required by this metho... push 05 Apr 2017 11:28AM UTC bajtos travis-ci pending completion  
5609 feature/access-token-scopes Support scopes defined via model settings push 29 Mar 2017 12:29PM UTC bajtos travis-ci pending completion  
5607 feature/access-token-scopes address code review comments push 29 Mar 2017 08:48AM UTC bajtos travis-ci pending completion  
5605 feature/access-token-scopes Many method scopes, tokens w/ custom and default scopes Define a special built-in scope name "DEFAULT" that's used when a method/token does not provide any scopes. This allows access tokens to grant access to both the default scope and any additi... push 29 Mar 2017 08:41AM UTC bajtos travis-ci pending completion  
See All Builds (1043)
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2025 Coveralls, Inc