Change oauth "scope changed" to warning from exception
commit8291d8caaa2238313923953ef040d09e06a129a6
authorMagnus Hagander <magnus@hagander.net>
Thu, 20 Jun 2019 16:45:47 +0000 (20 18:45 +0200)
committerMagnus Hagander <magnus@hagander.net>
Thu, 20 Jun 2019 16:49:25 +0000 (20 18:49 +0200)
treedc6cc93b7f7e12990644970db0e4a0a25539954c
parentb739d42509f1486bfacfd42c59138323afcd58d8
Change oauth "scope changed" to warning from exception

Previously we let oauthlib handle it and it turned it into an exception
aborging the login. Instread of that, turn off the handling in oauthlib
and manually verify the scope, logging a warning.

Prompted by the fact that Google suddenly started changing the scope of
logins by adding openid connect information even when not asked for.
pgweb/account/oauthclient.py
pgweb/account/urls.py