1
0
Fork 0
mirror of https://github.com/Lynnesbian/FediBooks/ synced 2024-11-25 08:38:59 +00:00

add missing permission

This commit is contained in:
Lynne Megido 2019-09-24 11:48:04 +10:00
parent 8d99f46d1a
commit b1aec4c8d5

View file

@ -51,7 +51,7 @@ def bot_accounts_add(mysql, cfg):
session['client_id'], session['client_secret'] = Mastodon.create_app( session['client_id'], session['client_secret'] = Mastodon.create_app(
"FediBooks User Authenticator", "FediBooks User Authenticator",
api_base_url="https://{}".format(session['instance']), api_base_url="https://{}".format(session['instance']),
scopes=["read:statuses"] if session['instance_type'] == 'Mastodon' else ["read"], scopes=["read:statuses", "read:accounts"] if session['instance_type'] == 'Mastodon' else ["read"],
website=cfg['base_uri'] website=cfg['base_uri']
) )
@ -63,7 +63,7 @@ def bot_accounts_add(mysql, cfg):
session['url'] = client.auth_request_url( session['url'] = client.auth_request_url(
client_id=session['client_id'], client_id=session['client_id'],
scopes=["read:statuses"] if session['instance_type'] == 'Mastodon' else ["read"] scopes=["read:statuses", "read:accounts"] if session['instance_type'] == 'Mastodon' else ["read"]
) )
elif session['step'] == 2: elif session['step'] == 2:
@ -72,7 +72,7 @@ def bot_accounts_add(mysql, cfg):
client = Mastodon(client_id=session['client_id'], client_secret=session['client_secret'], api_base_url=session['instance']) client = Mastodon(client_id=session['client_id'], client_secret=session['client_secret'], api_base_url=session['instance'])
session['secret'] = client.log_in( session['secret'] = client.log_in(
code = request.form['code'], code = request.form['code'],
scopes=["read:statuses"] if session['instance_type'] == 'Mastodon' else ["read"], scopes=["read:statuses", "read:accounts"] if session['instance_type'] == 'Mastodon' else ["read"],
) )
username = client.account_verify_credentials()['username'] username = client.account_verify_credentials()['username']
if username != session['username']: if username != session['username']: