@civitai/sdk 0.10.1 → 0.10.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -71,7 +71,11 @@ observed two ways is two values that can disagree.
|
|
|
71
71
|
A block opts in by declaring `auth: "oauth"` in its `block.manifest.json`. The
|
|
72
72
|
host then hands it a real OAuth access token that `/api/v1`, the orchestrator
|
|
73
73
|
and the MCP accept, and consent — including `requestGrants` — goes through the
|
|
74
|
-
host's consent dialog.
|
|
74
|
+
host's consent dialog. The manifest must also declare `user:read:self`, which
|
|
75
|
+
every OAuth token carries: on civitai.com the host never mints one without it
|
|
76
|
+
and hands back the block token. The dev tunnel mints one regardless, so a
|
|
77
|
+
missing `user:read:self` only shows up after approval. And `auth: "oauth"` cannot be declared alongside any
|
|
78
|
+
`apps:storage:*` scope: such a manifest is refused at submit.
|
|
75
79
|
|
|
76
80
|
### When the token is the block-scoped one
|
|
77
81
|
|
package/package.json
CHANGED