Update access token scopes
-
Please check this box if this contribution uses AI-generated content (including content generated by GitLab Duo features) as outlined in the GitLab DCO & CLA. As a benefit of being a GitLab Community Contributor, you receive complimentary access to GitLab Duo.
Resolves #6427 (closed)
- Updates the valid scopes for project, group and personal access tokens.
- Separates the lists for project and group tokens as the valid ones are currently different.
- Correct service account access token documentation as that was listing the old project/group scopes but the validation was correctly checking for personal scopes.
- Uses the token being rotated to do a self rotation if the self_rotate scope is in the token for project, group, group service account and personal access tokens.
Edited by Heidi Berry