add scope to id

id.saladeaula.digital/app/integrations/apigateway_oauth2/resource_protector.py

@@ -1,4 +1,19 @@
 from authlib.oauth2 import ResourceProtector as _ResourceProtector
+from aws_lambda_powertools.event_handler import APIGatewayHttpResolver
+from aws_lambda_powertools.event_handler.middlewares import NextMiddleware
+
+from .requests import APIGatewayJsonRequest
 
 
-class ResourceProtector(_ResourceProtector): ...
+class ResourceProtector(_ResourceProtector):
+    def __call__(self, scopes=None, optional=False, **kwargs):
+        claims = kwargs
+        # backward compatibility
+        claims['scopes'] = scopes
+
+        def wrapper(app: APIGatewayHttpResolver, next_middleware: NextMiddleware):
+            request = APIGatewayJsonRequest(app.current_event)
+            print(request)
+            return next_middleware(app)
+
+        return wrapper

id.saladeaula.digital/app/integrations/apigateway_oauth2/tokens.py

@@ -1,5 +1,5 @@
 import time
-from dataclasses import dataclass
+from dataclasses import dataclass, field
 
 from authlib.oauth2.rfc6749 import (
     AuthorizationCodeMixin,
@@ -15,6 +15,7 @@ class User:
     name: str
     email: str
     email_verified: bool = False
+    scope: list[str] | None = None
 
     def get_user_id(self):
         return self.id