fix: restore scopes

Signed-off-by: Umberto Sgueglia <usgueglia@contractor.linuxfoundation.org>

Author: ulemons

backend/src/api/public/v1/index.ts

@@ -4,8 +4,8 @@ import { NotFoundError } from '@crowd/common'
 
 import { createRateLimiter } from '@/api/apiRateLimiter'
 import { safeWrap } from '@/middlewares/errorMiddleware'
-
 import { SCOPES } from '@/security/scopes'
+
 import { AUTH0_CONFIG } from '../../../conf'
 import { oauth2Middleware } from '../middlewares/oauth2Middleware'
 import { requireScopes } from '../middlewares/requireScopes'
@@ -34,7 +34,7 @@ export function v1Router(): Router {
     /^\/packages:batch-stewardship\/?$/,
     oauth2Middleware(AUTH0_CONFIG),
     packagesRateLimiter,
-    requireScopes([SCOPES.READ_STEWARDSHIPS]),
+    requireScopes([SCOPES.READ_PACKAGES, SCOPES.READ_STEWARDSHIPS], 'all'),
     safeWrap(batchGetStewardship),
   )
   router.use('/packages', oauth2Middleware(AUTH0_CONFIG), packagesRouter())

backend/src/api/public/v1/packages/index.ts

@@ -3,8 +3,8 @@ import { Router } from 'express'
 import { createRateLimiter } from '@/api/apiRateLimiter'
 import { requireScopes } from '@/api/public/middlewares/requireScopes'
 import { safeWrap } from '@/middlewares/errorMiddleware'
-
 import { SCOPES } from '@/security/scopes'
+
 import { getPackage } from './getPackage'
 import { getPackagesMetrics } from './getPackagesMetrics'
 import { listPackages } from './listPackages'
@@ -20,24 +20,11 @@ export function packagesRouter(): Router {
   const router = Router()
 
   router.use(rateLimiter)
+  router.use(requireScopes([SCOPES.READ_PACKAGES, SCOPES.READ_STEWARDSHIPS], 'all'))
 
-  router.get(
-    '/',
-    requireScopes([SCOPES.READ_PACKAGES, SCOPES.READ_STEWARDSHIPS], 'any'),
-    safeWrap(listPackages),
-  )
-
-  router.get(
-    '/metrics',
-    requireScopes([SCOPES.READ_PACKAGES, SCOPES.READ_STEWARDSHIPS], 'any'),
-    safeWrap(getPackagesMetrics),
-  )
-
-  router.get(
-    '/detail',
-    requireScopes([SCOPES.READ_PACKAGES, SCOPES.READ_STEWARDSHIPS], 'any'),
-    safeWrap(getPackage),
-  )
+  router.get('/', safeWrap(listPackages))
+  router.get('/metrics', safeWrap(getPackagesMetrics))
+  router.get('/detail', safeWrap(getPackage))
 
   return router
 }