capsets

backend/src/routes/auth.rs

@@ -29,8 +29,8 @@ use crate::{
     },
     error::{AppError, AppResult},
     models::{
-        ApiCapability, MagicToken, MagicTokenKind, NewUser, NewUserSession, TenantStatus, User,
-        UserMembership, UserSession,
+        MagicToken, MagicTokenKind, NewUser, NewUserSession, TenantStatus, User, UserMembership,
+        UserSession,
     },
     schema::{
         magic_tokens::dsl as magic_dsl, tenants::dsl as tenant_dsl,
@@ -232,7 +232,7 @@ pub async fn api_token_exchange(
 
     let mut conn = state.db_unscoped()?;
 
-    let token = find_active_token_by_secret(&mut conn, None, secret, ApiCapability::ProfileRead)?
+    let token = find_active_token_by_secret(&mut conn, None, secret, None)?
         .ok_or_else(AppError::unauthorized)?;
 
     let user: User = dsl::users.find(token.user_id).first(&mut conn)?;