wanas-zcrm-extractor 1.5.2 → 1.5.3

package/README.md

@@ -329,7 +329,7 @@ zcrm audit                      # last 3 years by default
 zcrm audit --filter input.json  # custom export criteria
 ```
 
-> **Requires the `ZohoCRM.settings.audit_logs.ALL` OAuth scope.** It's in the default scopes, but if you authenticated *before* it was added you'll see `401 invalid oauth scope` — just re-authenticate to grant it: `zcrm logout` then `zcrm login`.
+> **Requires the audit-log OAuth scopes** — `ZohoCRM.settings.audit_logs.CREATE`, `ZohoCRM.settings.audit_logs.READ`, and `ZohoFiles.files.READ`. They're in the default scopes, but if you authenticated *before* they were added you'll see `401 invalid oauth scope` — just re-authenticate: `zcrm logout` then `zcrm login`.
 </details>
 
 <br>

package/bin/cli.js

@@ -581,8 +581,9 @@ program
       const isScope = error.response?.data?.code === 'OAUTH_SCOPE_MISMATCH' || /scope/i.test(apiMsg || '');
       console.error(`\n❌ Audit log export failed: ${apiMsg}`);
       if (isScope) {
-        console.error('\n\x1b[33mThis needs the \x1b[1mZohoCRM.settings.audit_logs.ALL\x1b[0m\x1b[33m OAuth scope, which your current');
-        console.error('session was not granted. Re-authenticate to add it:\x1b[0m');
+        console.error('\n\x1b[33mThis needs the audit-log scopes — \x1b[1mZohoCRM.settings.audit_logs.CREATE\x1b[0m\x1b[33m,');
+        console.error('\x1b[1mZohoCRM.settings.audit_logs.READ\x1b[0m\x1b[33m and \x1b[1mZohoFiles.files.READ\x1b[0m\x1b[33m — which your current');
+        console.error('session was not granted. Re-authenticate to add them:\x1b[0m');
         console.error('   \x1b[36mzcrm logout\x1b[0m  then  \x1b[36mzcrm login\x1b[0m');
       }
       process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wanas-zcrm-extractor",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "description": "Local Zoho CRM V8 Metadata Extractor CLI and Web Dashboard Utility",
   "main": "server.js",
   "bin": {

package/src/services/authService.js

@@ -54,7 +54,11 @@ class AuthService {
    * @returns {string} Commas-separated list of scopes.
    */
   getScopes() {
-    const defaultScopes = 'ZohoCRM.modules.ALL,ZohoCRM.settings.ALL,ZohoCRM.users.ALL,ZohoCRM.org.ALL,ZohoCRM.bulk.ALL,ZohoCRM.notifications.ALL,ZohoCRM.coql.READ,ZohoCRM.settings.functions.ALL,ZohoCRM.settings.audit_logs.ALL';
+    // Every scope below is documented in the Zoho CRM V8 API reference. Audit
+    // logs have NO `.ALL` variant — the export flow uses the three specific
+    // operation scopes (CREATE to initiate, READ to poll, ZohoFiles.files.READ
+    // to download the result file).
+    const defaultScopes = 'ZohoCRM.modules.ALL,ZohoCRM.settings.ALL,ZohoCRM.users.ALL,ZohoCRM.org.ALL,ZohoCRM.bulk.ALL,ZohoCRM.notifications.ALL,ZohoCRM.coql.READ,ZohoCRM.settings.functions.ALL,ZohoCRM.settings.audit_logs.CREATE,ZohoCRM.settings.audit_logs.READ,ZohoFiles.files.READ';
     if (process.env.ZCRM_CLI_MODE === 'true') {
       return configStore.get('scopes') || process.env.ZOHO_SCOPES || defaultScopes;
     }