Daniel Holmgren
50c0ec176c
Service auth method binding (lxm) (#2663)
* add scopes to service auth impl
* add error to getServiceAuth
* send scoped tokens from pds
* clean up privileged access scopes & allow simple service auth tokens for app passwords
* integration into ozone
* fix up bsky tests
* cleanup xrpc-server tests
* fix up tests & types
* one more test
* fix read after write tests
* fix mod auth test
* convert scopes to be a single method name
* add scope check callback for auth verifier
* pds changes only
* fix feed generation tests
* use scope for ozone service profile
* dont verify scopes on pds yet
* tidy
* tidy imports
* changeset
* add tests
* tidy
* another changeset
* scope -> lxm
* tidy
* clean up scope references
* update nonce size
* pr feedback
* trim trailing slash
* nonce -> jti
* fix xrpc-server test
* allow service auth on uploadBlob
* fix build error
* changeset
* build, tidy
* xrpc-server: update lxm claim check error
* appview: temporarily permit labeler service calls to omit lxm claim
* xrpc-server: fix test
* changeset
* fix merged tests
---------
Co-authored-by: Devin Ivy <devinivy@gmail.com>