tokenmgr: added scope as config option

glpatcern · glpatcern · commit 1cc122417264 · 2026-07-03T17:16:21.000+02:00
diff --git a/utils/tokenmanagement.go b/utils/tokenmanagement.go
@@ -55,6 +55,7 @@ type config struct {
 	ClientSecret      string `mapstructure:"client_secret"`
 	Timeout           int64  `mapstructure:"timeout"`
 	Insecure          bool   `mapstructure:"insecure"`
+	Scope             string `mapstructure:"scope"`
 }
 
 // InitAPITokenManager initializes a new APITokenManager.
@@ -98,6 +99,7 @@ func (a *APITokenManager) getAPIToken(ctx context.Context) (string, time.Time, e
 	params := url.Values{
 		"grant_type": {"client_credentials"},
 		"audience":   {a.conf.TargetAPI},
+		"scope":      {a.conf.Scope},
 	}
 
 	httpReq, err := http.NewRequest(http.MethodPost, a.conf.OIDCTokenEndpoint, strings.NewReader(params.Encode()))

Original file line number	Diff line number	Diff line change
`@@ -55,6 +55,7 @@ type config struct {`
`55`	`55`	ClientSecret string `mapstructure:"client_secret"`
`56`	`56`	Timeout int64 `mapstructure:"timeout"`
`57`	`57`	Insecure bool `mapstructure:"insecure"`
	`58`	+ Scope string `mapstructure:"scope"`
`58`	`59`	`}`
`59`	`60`
`60`	`61`	`// InitAPITokenManager initializes a new APITokenManager.`
`@@ -98,6 +99,7 @@ func (a *APITokenManager) getAPIToken(ctx context.Context) (string, time.Time, e`
`98`	`99`	`params := url.Values{`
`99`	`100`	`"grant_type": {"client_credentials"},`
`100`	`101`	`"audience": {a.conf.TargetAPI},`
	`102`	`+ "scope": {a.conf.Scope},`
`101`	`103`	`}`
`102`	`104`
`103`	`105`	`httpReq, err := http.NewRequest(http.MethodPost, a.conf.OIDCTokenEndpoint, strings.NewReader(params.Encode()))`