Allow /v1/me for beans scope.
This commit is contained in:
parent
fd24b59e89
commit
b3660dd3a5
1 changed files with 1 additions and 1 deletions
|
@ -18,7 +18,7 @@ class V1UsersRoutes implements RouteHandler {
|
|||
$response->setHeader('Cache-Control', 'no-store');
|
||||
|
||||
$authz = $this->ctx->getAuthzContext();
|
||||
if(!$authz->hasScope('identify'))
|
||||
if(!$authz->hasScope('identify') && !$authz->hasScope('beans'))
|
||||
return 403;
|
||||
|
||||
if($authz->isAppUser()) {
|
||||
|
|
Loading…
Reference in a new issue