Giteabot f2a08e0261 fix(oauth2): allow users to approve scope changes (#38942) (#39521) ...

Backport #38942 by @Harsh-128

Lets users approve an OAuth2 scope change on an existing grant instead
of failing with `a grant exists with different scope`. Fixes
https://github.com/go-gitea/gitea/issues/38940.

- Approving a different scope updates the existing grant. Issued tokens
follow immediately, since their scope is read from the grant.
- Confidential and trusted apps show the consent page when the scope set
changes, instead of silently reusing the old grant.
- An omitted `scope` reuses the existing grant's scope, like GitHub.
- The consent page lists newly added scopes.

<img width="500" alt="consent page with new scopes"
src="https://github.com/user-attachments/assets/40282353-32fe-4d87-9929-08aabbab32f1"
/>

Co-authored-by: Harsh Sharma <harshee2000@gmail.com>
Co-authored-by: bircni <bircni@icloud.com>
Co-authored-by: silverwind <me@silverwind.io>

2026-10-01 17:35:17 +00:00

..

fileicon

chore(deps): update dependencies (#39176)

2026-08-31 12:34:15 +02:00

gitignore

Fix various typos in codebase (#35480)

2025-09-13 10:34:43 -04:00

label

feat: Add sorting by exclusive labels (issue priority) (#33206)

2025-04-10 17:18:07 +00:00

license

Update the Unlicense copy to latest version (#36636)

2026-02-15 22:17:05 +00:00

locale

fix(oauth2): allow users to approve scope changes (#38942) (#39521)

2026-10-01 17:35:17 +00:00

readme

…