iam icon indicating copy to clipboard operation
iam copied to clipboard

Internal server error due to incorrectly written scopes in the IAM scope policies

Open rmiccoli opened this issue 3 years ago • 0 comments

When you request an access token and a parametric scope, e.g. storage.read:/, is written without ':' in the IAM scope policies, you get an internal server error.

Example of incorrectly written scope policy:

{
  "description": "Deny access to storage.read scope to everyone",
  "rule": "DENY",
  "scopes": ["storage.read/"],
  "matchingPolicy": "PATH"
}

rmiccoli avatar Sep 30 '22 16:09 rmiccoli