From ceaae667b0b1befdfa482b1cfa4703a2c98f67cf Mon Sep 17 00:00:00 2001
From: konarfil <filip.konarik@ysoft.com>
Date: Tue, 10 Oct 2023 14:29:20 +0200
Subject: [PATCH] Update scopes

---
 src/flow/code.html     | 5 +++--
 src/flow/implicit.html | 5 +++--
 src/flow/pkce-2.html   | 5 +++--
 src/flow/webauthn.html | 9 +++++----
 src/sitemap.xml        | 6 ++++++
 5 files changed, 20 insertions(+), 10 deletions(-)

diff --git a/src/flow/code.html b/src/flow/code.html
index 19d22ca..e5c8710 100644
--- a/src/flow/code.html
+++ b/src/flow/code.html
@@ -98,7 +98,8 @@
                                         <p>
                                             Scopes requested by the client. Scopes are used to limit the access of the access
                                             token. In this case, we are requesting the <b>offline_access</b> scope,
-                                            which allows the client to obtain a refresh token.
+                                            which allows the client to obtain a refresh token, <b>photos</b> to access photos
+                                            and <b>files</b> to have access to user files.
                                         </p>
                                     </li>
                                     <li class="collection-item">
@@ -173,7 +174,7 @@
 
         const responseType = "code";
         const redirectUri = getRedirectUri();
-        const scope = "offline_access";
+        const scope = "offline_access%20photos%20files";
         const state = generateSessionState();
         setCookie("state", state, 5);
 
diff --git a/src/flow/implicit.html b/src/flow/implicit.html
index 3eb52c2..dc0bddf 100644
--- a/src/flow/implicit.html
+++ b/src/flow/implicit.html
@@ -91,7 +91,8 @@
                                         <p>
                                             Scopes requested by the client. Scopes are used to limit the access of the access
                                             token. In this case, we are requesting the <b>offline_access</b> scope,
-                                            which allows the client to obtain a refresh token.
+                                            which allows the client to obtain a refresh token, <b>photos</b> to access photos
+                                            and <b>files</b> to have access to user files.
                                         </p>
                                     </li>
                                     <li class="collection-item">
@@ -166,7 +167,7 @@
 
         const responseType = "token";
         const redirectUri = getRedirectUri();
-        const scope = "offline_access";
+        const scope = "offline_access%20photos%20files";
         const state = generateSessionState();
         setCookie("state", state, 5);
 
diff --git a/src/flow/pkce-2.html b/src/flow/pkce-2.html
index 6ade4e6..abdc2d8 100644
--- a/src/flow/pkce-2.html
+++ b/src/flow/pkce-2.html
@@ -101,7 +101,8 @@
                                         <p>
                                             Scopes requested by the client. Scopes are used to limit the access of the access
                                             token. In this case, we are requesting the <b>offline_access</b> scope,
-                                            which allows the client to obtain a refresh token.
+                                            which allows the client to obtain a refresh token, <b>photos</b> to access photos
+                                            and <b>files</b> to have access to user files.
                                         </p>
                                     </li>
                                     <li class="collection-item">
@@ -192,7 +193,7 @@
 
         const responseType = "code";
         const redirectUri = getRedirectUri();
-        const scope = "offline_access";
+        const scope = "offline_access%20photos%20files";
         const state = generateSessionState();
         const codeChallenge = getCookie("code_challenge");
 
diff --git a/src/flow/webauthn.html b/src/flow/webauthn.html
index 6ac35b0..224a46a 100644
--- a/src/flow/webauthn.html
+++ b/src/flow/webauthn.html
@@ -97,9 +97,10 @@
                                     <li class="collection-item">
                                         <p><b><span class="emphasis">scope</span>=<span id="scope"></span></b></p>
                                         <p>
-                                            Scopes requested by the client. Scopes are used to limit the access of the
-                                            access token. In this case, we are requesting the <b>offline_access</b> scope,
-                                            which allows the client to obtain a refresh token.
+                                            Scopes requested by the client. Scopes are used to limit the access of the access
+                                            token. In this case, we are requesting the <b>offline_access</b> scope,
+                                            which allows the client to obtain a refresh token, <b>photos</b> to access photos
+                                            and <b>files</b> to have access to user files.
                                         </p>
                                     </li>
                                     <li class="collection-item">
@@ -173,7 +174,7 @@
         const authUrl = baseUrl + "/passwordless"
         const responseType = "code";
         const redirectUri = getRedirectUri();
-        const scope = "offline_access";
+        const scope = "offline_access%20photos%20files";
         const state = generateSessionState();
         setCookie("webauth-state", state, 5);
 
diff --git a/src/sitemap.xml b/src/sitemap.xml
index 2a5c8cb..4411ee5 100644
--- a/src/sitemap.xml
+++ b/src/sitemap.xml
@@ -24,4 +24,10 @@
         <changefreq>weekly</changefreq>
         <priority>0.8</priority>
     </url>
+    <url>
+        <loc>https://oauth-playground.online/flow/implicit</loc>
+        <lastmod>2023-10-10</lastmod>
+        <changefreq>weekly</changefreq>
+        <priority>0.8</priority>
+    </url>
 </urlset>