Infinitay / Infinitay/Unlisted-YouTube-Video-Finder

[Backend] No logic handling for authorized users, but no provided scope

Open
#22 0 comments 0 reactions 0 assignees View on GitHub
back end bug
Dominant language
TypeScript
Stars
12
Forks
1
PR merge metrics
No merged PRs in 30d

Description

![image](https://user-images.githubusercontent.com/6964154/182413197-7b55e44a-eedf-4187-941d-65bd7b8054fa.png)

When authenticating for the first time, there is a checkbox user's have to check in the current application state to allow access for YouTube data. If they don't check it but still authenticate without that specific scope, they can't use the app because the API 403s.

![image](https://user-images.githubusercontent.com/6964154/182414751-806ded52-ed69-4d31-af24-8a7b83c18c30.png)

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the authentication flow and the YouTube API request that fails with a 403 when the user omits the requested scope. Clarify the expected behavior for authorized users without that scope, then add coverage showing that the application handles this state without becoming unusable.

Written by the indexing model from the issue text.

Assessment

Tech stack
react, typescript
Domain
api, authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.