Use a common build api scope string

google · Nov 7, 2024 · eeb1ff7 · eeb1ff7
1 parent 504c18a
commit eeb1ff7
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 5 deletions.
diff --git a/base/cvd/cuttlefish/host/commands/cvd/fetch/fetch_cvd.cc b/base/cvd/cuttlefish/host/commands/cvd/fetch/fetch_cvd.cc
@@ -349,7 +349,7 @@ Result<std::unique_ptr<BuildApi>> GetBuildApi(const BuildApiFlags& flags) {
                                          std::chrono::milliseconds(5000));
 
   std::vector<std::string> scopes = {
-      "https://www.googleapis.com/auth/androidbuild.internal",
+      kAndroidBuildApiScope,
       "https://www.googleapis.com/auth/userinfo.email",
   };
   Result<std::unique_ptr<CredentialSource>> cvd_creds =

diff --git a/base/cvd/cuttlefish/host/libs/web/credential_source.cc b/base/cvd/cuttlefish/host/libs/web/credential_source.cc
@@ -42,9 +42,6 @@
 namespace cuttlefish {
 namespace {
 
-constexpr char kBuildScope[] =
-    "https://www.googleapis.com/auth/androidbuild.internal";
-
 constexpr auto kRefreshWindow = std::chrono::minutes(2);
 
 // Credentials with known expiration times with behavior to load new
@@ -159,7 +156,7 @@ std::unique_ptr<CredentialSource> TryParseServiceAccount(
     return {};
   }
   auto result = ServiceAccountOauthCredentialSource::FromJson(
-      http_client, content, kBuildScope);
+      http_client, content, kAndroidBuildApiScope);
   if (!result.ok()) {
     LOG(DEBUG) << "Failed to load service account json file: \n"
                << result.error().FormatForEnv();

diff --git a/base/cvd/cuttlefish/host/libs/web/credential_source.h b/base/cvd/cuttlefish/host/libs/web/credential_source.h
@@ -23,6 +23,9 @@
 
 namespace cuttlefish {
 
+constexpr char kAndroidBuildApiScope[] =
+    "https://www.googleapis.com/auth/androidbuild.internal";
+
 class CredentialSource {
  public:
   virtual ~CredentialSource() = default;