Skip to content

Endpoints for Duo Workflow accept `ai_workflows` scope

We created a new OAuth scope called ai_workflows in this MR: Add service class to generate Duo Workflow token (!159661 - merged)

We created this scope so that we can pass the token to Duo Workflow and be certain that it is only accessing specific endpoints. If we used a token with the api scope, for example, that would be too much access. But we also need provide access to a few non-GET endpoints. So we can't rely on a read_api scope.

Now that the scope is in place, we need to ensure that all API endpoints required by Duo Workflow accept this scope.

Those endpoints are:

  1. All API endpoints referenced in this file
  2. All API endpoints referenced in this file
Edited by Jessie Young