Function spec

e2e/scenarios/oauth-scope-insufficient.test.ts:100–151

(
  baseUrl: string,
  oauth: { readonly authorizationEndpoint: string; readonly tokenEndpoint: string },
)

  );

const spec = (
  baseUrl: string,
  oauth: { readonly authorizationEndpoint: string; readonly tokenEndpoint: string },
): string =>
  JSON.stringify({
    openapi: "3.0.3",
    info: { title: "Scoped API", version: "1.0.0" },
    servers: [{ url: baseUrl }],
    paths: {
      "/inbox": {
        get: {
          operationId: "readInbox",
          summary: "List inbox messages",
          security: [{ oauth: ["mail.read"] }],
          responses: { "200": { description: "messages" } },
        },
      },
      "/files": {
        get: {
          operationId: "listFiles",
          summary: "List drive files",
          security: [{ oauth: ["files.read"] }],
          responses: { "200": { description: "files" } },
        },
      },
      "/admin": {
        get: {
          operationId: "adminAction",
          summary: "An admin-only action",
          security: [{ oauth: ["mail.read"] }],
          responses: { "200": { description: "ok" } },
        },
      },
    },
    components: {
      securitySchemes: {
        oauth: {
          type: "oauth2",
          flows: {
            authorizationCode: {
              authorizationUrl: oauth.authorizationEndpoint,
              tokenUrl: oauth.tokenEndpoint,
              scopes: {
                "mail.read": "Read mail",
                "files.read": "Read files",
              },
            },
          },
        },
      },
    },
  });

const invokeByAddressCode = (address: string, args: unknown) => `
const segments = ${JSON.stringify(address)}.split(".").slice(1);