Struct APIKeyScopeSet

coderd/database/modelmethods.go:336–339

APIKeyScopeSet merges expanded scopes with the API key's DB allow_list. If the DB allow_list is a wildcard or empty, the merged scope's allow list is unchanged. Otherwise, the DB allow_list overrides the merged AllowIDList to enforce the token's resource scoping consistently across all permissions.

// unchanged. Otherwise, the DB allow_list overrides the merged AllowIDList to
// enforce the token's resource scoping consistently across all permissions.
type APIKeyScopeSet struct {
	Scopes    APIKeyScopes
	AllowList AllowList
}

var _ rbac.ExpandableScope = APIKeyScopeSet{}