fix(api): validate oauth provider scopes (#974)

keephq · Mar 18, 2024 · 0ba3898 · 0ba3898
1 parent 5f5bb6f
commit 0ba3898
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/keep/api/routes/providers.py b/keep/api/routes/providers.py
@@ -628,6 +628,8 @@ async def install_provider_oauth2(
             context_manager, provider_unique_id, provider_type, provider_config
         )
 
+        validated_scopes = validate_scopes(provider)
+
         secret_manager = SecretManagerFactory.get_secret_manager(context_manager)
         secret_name = f"{tenant_id}_{provider_type}_{provider_unique_id}"
         secret_manager.write_secret(
@@ -643,6 +645,7 @@ async def install_provider_oauth2(
             installed_by=installed_by,
             installation_time=time.time(),
             configuration_key=secret_name,
+            validatedScopes=validated_scopes,
         )
         session.add(provider)
         session.commit()