impl/prod: Expose Remote API scopes.

impl/prod/context.go

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 package prod
 
 import (
         "fmt"
         "net/http"
         "net/http/cookiejar"
         "net/url"
         "strings"
 
         "github.com/luci/gae/service/info"
         "github.com/luci/gae/service/urlfetch"
         "golang.org/x/net/context"
         gOAuth "golang.org/x/oauth2/google"
         "google.golang.org/appengine"
         "google.golang.org/appengine/remote_api"
 )
 
+// RemoteAPIScopes is the set of OAuth2 scopes needed for Remote API access.
+var RemoteAPIScopes = []string{

[dnj, 2016/01/26 05:21:35]

This is useful when using external authentication (e.g., luci-go's auth
library).

+        "https://www.googleapis.com/auth/appengine.apis",
+        "https://www.googleapis.com/auth/userinfo.email",
+        "https://www.googleapis.com/auth/cloud.platform",
+}
+
 type key int
 
 var (
         prodContextKey      key
         prodContextNoTxnKey key = 1
         probeCacheKey       key = 2
 )
 
 // AEContext retrieves the raw "google.golang.org/appengine" compatible Context.
 //
@@ skipping 100 matching lines @@
                         rsp, err = client.Get(u)
                         if err != nil {
                                 return
                         }
                         defer rsp.Body.Close()
                 } else {
                         aeCtx := AEContextNoTxn(*inOutCtx)
                         if aeCtx == nil {
                                 aeCtx = context.Background()
                         }
-                        client, err = gOAuth.DefaultClient(aeCtx,
-                                "https://www.googleapis.com/auth/appengine.apis",
-                                "https://www.googleapis.com/auth/userinfo.email",
-                                "https://www.googleapis.com/auth/cloud.platform",
-                        )
+                        client, err = gOAuth.DefaultClient(aeCtx, RemoteAPIScopes...)
                         if err != nil {
                                 return
                         }
                 }
         }
 
         aeCtx, err := remote_api.NewRemoteContext(host, client)
         if err != nil {
                 return
         }
         *inOutCtx = setupAECtx(*inOutCtx, aeCtx)
         return nil
 }