Skip to content
This repository has been archived by the owner on Sep 10, 2024. It is now read-only.

Commit

Permalink
Fill in missing supported authorization scopes
Browse files Browse the repository at this point in the history
  • Loading branch information
hughns authored and sandhose committed Aug 7, 2024
1 parent ac8013b commit 80e993e
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions docs/topics/authorization.md
Original file line number Diff line number Diff line change
Expand Up @@ -86,11 +86,11 @@ the API can be requested by a session which has the [`urn:mas:graphql:*`] and th
MAS supports a few different authorization grants for OAuth 2.0 sessions.
Whilst this section won't go into the technical details of how those grants work, it's important to understand what they are and what they are used for.

| Grant type | Entity | User interaction | Matrix C-S API | Synapse admin API |  MAS Internal GraphQL API | MAS Admin API |
| --------------------------------------------------- | ------ | ---------------- | -------------- | ----------------- | ------------------------- | ------------- |
| [Authorization code](#authorization-code-grant) | User | Same device | Yes | Yes | Yes | TODO: ? |
| [Device authorization](#device-authorization-grant) | User | Other device | Yes | Yes | Yes | TODO: ? |
| [Client credentials](#client-credentials-grant) | Client | None | No | No[^admin] | No | TODO: ? |
| Grant type | Entity | User interaction | Matrix C-S API | Synapse Admin API | MAS Admin API | MAS Internal GraphQL API |
| --------------------------------------------------- | ------ | ---------------- | -------------- | ----------------- | ------------- | ------------------------ |
| [Authorization code](#authorization-code-grant) | User | Same device | Yes | Yes | Yes | Yes |
| [Device authorization](#device-authorization-grant) | User | Other device | Yes | Yes | Yes | Yes |
| [Client credentials](#client-credentials-grant) | Client | None | No | No[^admin] | Yes | Yes |

[^admin]: The Synapse admin API doesn't strictly require a user, but Synapse doesn't support client-only sessions yet. In the future, it will be possible to leverage the client credentials grant to access the Synapse admin API.

Expand Down

0 comments on commit 80e993e

Please sign in to comment.