Merge pull request #23 from matomo-org/PG-5113-show-scope

Adds code to show scope in the list view, #PG-5113

Author: AltamashShaikh

CHANGELOG.md

@@ -1,3 +1,6 @@
+5.0.2 - 2026-04-27
+- Added code to show scope in the list view
+
 5.0.1 - 2026-04-17
 - Fixes README.md
 

OAuth2.php

@@ -15,6 +15,7 @@
 use Piwik\Db;
 use Piwik\DbHelper;
 use Piwik\Option;
+use Piwik\Piwik;
 use Piwik\Plugin;
 use Piwik\Plugins\OAuth2\Access\OAuth2Access;
 use Piwik\Plugins\OAuth2\Auth\Oauth2Auth;
@@ -27,6 +28,17 @@ class OAuth2 extends Plugin
     public const OAUTH2_PRIVATE_OPTION_KEY = 'oauth2_private';
     public const OAUTH2_PUBLIC_OPTION_KEY = 'oauth2_public';
     public const OAUTH2_ENCRYPTION_OPTION_KEY = 'oauth2_encryption';
+
+    public static function getScopeDescriptions(): array
+    {
+        return [
+            'matomo:read' => Piwik::translate('OAuth2_ScopeReadDescription'),
+            'matomo:write' => Piwik::translate('OAuth2_ScopeWriteDescription'),
+            'matomo:admin' => Piwik::translate('OAuth2_ScopeAdminDescription'),
+            'matomo:superuser' => Piwik::translate('OAuth2_ScopeSuperUserDescription'),
+        ];
+    }
+
     public function registerEvents()
     {
         return [
@@ -155,6 +167,10 @@ public function getClientSideTranslationKeys(&$translationKeys)
         $translationKeys[] = 'OAuth2_ClientSecretVisibleHelp';
         $translationKeys[] = 'OAuth2_AdminDescriptionPlaceholder';
         $translationKeys[] = 'OAuth2_AdminRotatedNotification';
+        $translationKeys[] = 'OAuth2_ScopeSuperUserShort';
+        $translationKeys[] = 'UsersManager_PrivView';
+        $translationKeys[] = 'UsersManager_PrivWrite';
+        $translationKeys[] = 'UsersManager_PrivAdmin';
     }
 
     public function getTablesInstalled(&$allTablesInstalled)

Repositories/ScopeRepository.php

@@ -15,6 +15,7 @@
 use Matomo\Dependencies\Oauth2\League\OAuth2\Server\Repositories\ScopeRepositoryInterface;
 use Piwik\Piwik;
 use Piwik\Plugins\OAuth2\Entities\ClientEntity;
+use Piwik\Plugins\OAuth2\OAuth2;
 use Piwik\Plugins\OAuth2\Entities\ScopeEntity;
 use Piwik\Plugins\OAuth2\SystemSettings;
 
@@ -29,12 +30,7 @@ public function __construct(SystemSettings $settings)
 
     public static function getScopeDescriptions(): array
     {
-        return [
-            'matomo:read' => Piwik::translate('OAuth2_ScopeReadDescription'),
-            'matomo:write' => Piwik::translate('OAuth2_ScopeWriteDescription'),
-            'matomo:admin' => Piwik::translate('OAuth2_ScopeAdminDescription'),
-            'matomo:superuser' => Piwik::translate('OAuth2_ScopeSuperUserDescription'),
-        ];
+        return OAuth2::getScopeDescriptions();
     }
 
     public function getScopeEntityByIdentifier(string $identifier): ?ScopeEntityInterface

SystemSettings.php

@@ -10,7 +10,6 @@
 namespace Piwik\Plugins\OAuth2;
 
 use Piwik\Piwik;
-use Piwik\Plugins\OAuth2\Repositories\ScopeRepository;
 use Piwik\Settings\FieldConfig;
 use Piwik\Settings\Plugin\SystemSettings as BaseSystemSettings;
 use Piwik\Settings\Setting;
@@ -73,7 +72,7 @@ protected function init()
             $field->title = Piwik::translate('OAuth2_SystemSettingOAuthEnableRefreshTokenTitle');
         });
 
-        $scopes = ScopeRepository::getScopeDescriptions();
+        $scopes = OAuth2::getScopeDescriptions();
         $defaultScopes = $scopes;
         unset($defaultScopes['matomo:superuser']);
         $this->defaultScopes = $this->makeSetting('defaultScopes', array_keys($defaultScopes), FieldConfig::TYPE_ARRAY, function (FieldConfig $field) use ($scopes) {

lang/en.json

@@ -88,6 +88,7 @@
     "ScopeWriteDescription": "Matomo write level access",
     "ScopeAdminDescription": "Matomo admin level access",
     "ScopeSuperUserDescription": "Matomo superuser level access",
+    "ScopeSuperUserShort": "Superuser",
     "SystemSettingOAuthAccessTokenLifetimeTitle": "Access token lifetime (seconds)",
     "SystemSettingOAuthAccessTokenLifetimeDescription": "Define how long an access token remains valid after it is issued.",
     "SystemSettingOAuthRefreshTokenLifetimeTitle": "Refresh token lifetime (seconds)",

plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "OAuth2",
   "description": "Provide secure access to the Matomo API using scoped permissions. No static credentials.",
-  "version": "5.0.1",
+  "version": "5.0.2",
   "theme": false,
   "require": {
     "php": ">=8.1.0",

stylesheets/oauth2.less

@@ -1,3 +1,7 @@
+#content.admin:has(.oauth2-admin) {
+  max-width: unset !important;
+}
+
 #oauth2AuthorizePage {
   display: flex;
   width: 100%;
@@ -161,4 +165,4 @@
   #footerLinks {
     margin-top: 1rem;
   }
-}
+}