Status of this gem? Using scoped API tokens #6
Description
Is there interest in updates or PRs to this gem?
Many institutions are requiring applications to use Canvas' scoped API keys, and working with omniauth-canvas has made that a little tricky, though not impossible.
- Documentation: It needs to be clear that the
url:GET|/api/v1/users/:user_id/profilescope is required both to be enabled for the developer token and listed in the API request, since that's the endpoint used for profile info. - Without this, even if you correctly pass scopes to Canvas, you get a very opaque error, and because the request happens automatically, it took longer than I care to admit to debug this...
- I had to manually append the scopes as a query string to the auth and token URLs. It would be great if we could expose an easier config option. (I can provide more details later.)
I'm happy to draft a PR at some point, if it would be acceptable. Otherwise, no problem just maintaining our own fork.