Terraform: Is scope required for client grant? Why?

According to this Terraform Registry the scope is required. But my API does not really have/use any scopes? Any reason why is it required?

Hey there @kievbug welcome to the community!

I believe the scope param is required simply to adhere to protocol standards (OAuth2), security best practices, etc. That being said no scope(s) (scopes = []) is acceptable as well.

Starting with v1.1 for the auth0 terraform provider, it fails if we pass empty array for the scopes parameter when we add client grant.

1 Like

Hey @kievbug - You’re correct, it looks like validation was added to prevent an empty scope param - I just added a comment there just to confirm why this isn’t possibly currently.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.