add oauth scope for each service

goto · Oct 21, 2024 · f486efa · f486efa
1 parent af8ec05
commit f486efa
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/plugins/providers/bigquery/client.go b/plugins/providers/bigquery/client.go
@@ -32,7 +32,7 @@ func NewBigQueryClient(projectID string, credentialsJSON []byte, opts ...option.
 	var oauthClient func(name string) *http.Client
 	if credentialsJSON != nil {
 		var err error
-		creds, err = google.CredentialsFromJSON(ctx, credentialsJSON, cloudresourcemanager.CloudPlatformScope)
+		creds, err = google.CredentialsFromJSON(ctx, credentialsJSON, cloudresourcemanager.CloudPlatformScope, bqApi.BigqueryScope, iam.CloudPlatformScope)
 		if err != nil {
 			return nil, fmt.Errorf("failed to obtain credentials: %w", err)
 		}

diff --git a/plugins/providers/gcloudiam/client.go b/plugins/providers/gcloudiam/client.go
@@ -28,7 +28,7 @@ type iamClient struct {
 
 func newIamClient(credentialsJSON []byte, resourceName string) (*iamClient, error) {
 	ctx := context.Background()
-	creds, err := google.CredentialsFromJSON(ctx, credentialsJSON)
+	creds, err := google.CredentialsFromJSON(ctx, credentialsJSON, cloudresourcemanager.CloudPlatformScope, iam.CloudPlatformScope)
 	if err != nil {
 		return nil, fmt.Errorf("failed to obtain credentials: %w", err)
 	}

diff --git a/plugins/providers/gcs/client.go b/plugins/providers/gcs/client.go
@@ -24,7 +24,7 @@ type gcsClient struct {
 }
 
 func newGCSClient(ctx context.Context, projectID string, credentialsJSON []byte) (*gcsClient, error) {
-	creds, err := google.CredentialsFromJSON(ctx, credentialsJSON)
+	creds, err := google.CredentialsFromJSON(ctx, credentialsJSON, "https://www.googleapis.com/auth/devstorage.full_control")
 	if err != nil {
 		return nil, fmt.Errorf("failed to obtain credentials: %w", err)
 	}