When I am calling Bitbucket's authorize API : https://bitbucket.org/site/oauth2/authorize?response_type=code&client_id=cjsdknkcndksdnan&scope=pullrequest:write scope passed is pullrequest:write I am seeing the below thing in the UI: Confirm access to your account saanh_007 is requesting access to the following: * Read and modify your account information * Read and modify your repositories' issues * Access your repositories' build pipelines and configure their variables * Read and modify settings for projects in your workspace * Read and modify your workspace's project settings, and read and transfer repositories within your workspace's projects * Read and modify your repositories and their pull requests * Administer your repositories * Delete your repositories * Access and edit your workspaces/repositories' runners * Read and modify your snippets * Read and modify your team membership information * Read and modify your repositories' webhooks * Read and modify your repositories' wikis This 3rd party vendor has not provided a privacy policy or terms of use. Atlassian's Privacy Policy is not applicable to the use of this App. Why UI is showing all the permissions here inspite of sending just one scope?Is it expected behavior?

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Seeing the request for all permissions instead request for few via scope in authorize endpoint

saanjh jain

When I am calling Bitbucket's authorize API :
https://bitbucket.org/site/oauth2/authorize?response_type=code&client_id=cjsdknkcndksdnan&scope=pullrequest:write

scope passed is pullrequest:write

I am seeing the below thing in the UI:

Confirm access to your account

saanh_007 is requesting access to the following:

Read and modify your account information
Read and modify your repositories' issues
Access your repositories' build pipelines and configure their variables
Read and modify settings for projects in your workspace
Read and modify your workspace's project settings, and read and transfer repositories within your workspace's projects
Read and modify your repositories and their pull requests
Administer your repositories
Delete your repositories
Access and edit your workspaces/repositories' runners
Read and modify your snippets
Read and modify your team membership information
Read and modify your repositories' webhooks
Read and modify your repositories' wikis

This 3rd party vendor has not provided a privacy policy or terms of use. Atlassian's Privacy Policy is not applicable to the use of this App.

Why UI is showing all the permissions here inspite of sending just one scope?

Is it expected behavior?

Accepted answers

Theodora Boudale

Hi @saanjh jain and welcome to the community!

The permissions you see on this page are the permissions you have granted to the OAuth consumer.

If you want to change them, you can edit the OAuth consumer and change its permissions.

Kind regards,
Theodora

All comments

Theodora Boudale

Hi @saanjh jain and welcome to the community!

The permissions you see on this page are the permissions you have granted to the OAuth consumer.

If you want to change them, you can edit the OAuth consumer and change its permissions.

Kind regards,
Theodora

saanjh jain

ohh got it and the scope we pass in the /authorize call will decide what is the scope of the access Token.

Am i right?

Theodora Boudale

Hi @saanjh jain,

The scope of the access token is also determined by the permissions you have selected for the OAuth consumer, I don't believe it's possible to override them by adding scope in the URL https://bitbucket.org/site/oauth2/authorize?client_id={client_id}&response_type=token

Kind regards,
Theodora

saanjh jain

Then what is the role of scope?

When it will be used?

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

bitbucket

bitbucket-cloud