mirror of
https://github.com/DRYTRIX/TimeTracker.git
synced 2026-05-19 12:50:11 -05:00
f05d772dbb
- New scopes read:inventory and write:inventory; existing read/write:projects still grant same inventory access for backward compatibility - require_api_token() accepts tuple of scopes (any one required); inventory endpoints accept (read:inventory | read:projects) and (write:inventory | write:projects) - ApiTokenService: add new scopes to allowed list; document in API_TOKEN_SCOPES.md - Add tests for inventory report endpoints with scope checks