We currently require a special MBS scope from OIDC for users to submit builds.
But.. since we will have two different instances of MBS (one for copr and one for koji), we need that scope to be configurable so that the scope can't be re-used between the two.
The main intention here is to make non-primary deployments use a different scope, so that tickets issued for secondary MBS deployments (COPR, and maybe others in the future? I don't know.) that are attached to the same IdP can't cross-identify to eachother.
Metadata Update from @jkaluza: - Issue assigned to jkaluza
Metadata Update from @jkaluza: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.