fix: give the token all available scopes for user

2025-03-05 11:45:47 +01:00 · 2025-03-05 11:45:47 +01:00 · bc6c2a4a98
commit bc6c2a4a98
parent b7c8136b1e
1 changed files with 1 additions and 1 deletions
--- a/security.py
+++ b/security.py
@ -143,7 +143,7 @@ async def login_for_access_token(
    allowed_scopes = set(user.scopes.split())
    requested_scopes = set(form_data.scopes)
    access_token = create_access_token(
-        data={"sub": user.username, "scopes": list(allowed_scopes & requested_scopes)},
+        data={"sub": user.username, "scopes": list(allowed_scopes)},
        expires_delta=access_token_expires,
    )
    response.set_cookie(