OAuth Validation Error When Adding Trash Permission Scopes

[dkindlund]

Describe the bug
When attempting to add trash-specific scopes to my OAuth app, I get the following validation error:

Validation error: Invalid enum value. Expected 'table|create' | 'table|delete' | 'table|export' | 'table|import' | 'table|read' | 'table|update' | 'view|create' | 'view|delete' | 'view|read' | 'view|update' | 'field|create' | 'field|delete' | 'field|read' | 'field|update' | 'record|comment' | 'record|create' | 'record|delete' | 'record|read' | 'record|update' | 'automation|create' | 'automation|delete' | 'automation|read' | 'automation|update' | 'user|email_read', received 'table|trash_read' at "scopes[13]"; Invalid enum value. Expected 'table|create' | 'table|delete' | 'table|export' | 'table|import' | 'table|read' | 'table|update' | 'view|create' | 'view|delete' | 'view|read' | 'view|update' | 'field|create' | 'field|delete' | 'field|read' | 'field|update' | 'record|comment' | 'record|create' | 'record|delete' | 'record|read' | 'record|update' | 'automation|create' | 'automation|delete' | 'automation|read' | 'automation|update' | 'user|email_read', received 'table|trash_update' at "scopes[14]"; Invalid enum value. Expected 'table|create' | 'table|delete' | 'table|export' | 'table|import' | 'table|read' | 'table|update' | 'view|create' | 'view|delete' | 'view|read' | 'view|update' | 'field|create' | 'field|delete' | 'field|read' | 'field|update' | 'record|comment' | 'record|create' | 'record|delete' | 'record|read' | 'record|update' | 'automation|create' | 'automation|delete' | 'automation|read' | 'automation|update' | 'user|email_read', received 'table|trash_reset' at "scopes[15]"

To Reproduce
Steps to reproduce the behavior:

1. Go to an existing OAuth Apps entry
2. Check the Read table trash, Update table trash, and Reset table trash checkboxes
3. Click the Update button
4. See error

Expected behavior
I would expect to be able to grant my OAuth app trash management scopes without any error.

Screenshots

Client (please complete the following information):

• OS: [macOS]
• Browser [Chrome]

Platform (Please tell us which deployment version you are using)
[docker-standalone]

[dkindlund]

Problem

When attempting to add trash management permissions to an OAuth application, the Teable admin interface rejects the following scopes with a validation error:

• table|trash_read
• table|trash_update
• table|trash_reset

Error Message

Validation error: Invalid enum value. Expected 'table|create' | 'table|delete' | ... | 'user|email_read',
received 'table|trash_read' at "scopes[13]"

Invalid enum value. Expected 'table|create' | 'table|delete' | ... | 'user|email_read',
received 'table|trash_update' at "scopes[14]"

Invalid enum value. Expected 'table|create' | 'table|delete' | ... | 'user|email_read',
received 'table|trash_reset' at "scopes[15]"

Context

The trash management API endpoints are fully documented and functional (see Discussion
#1936):

• GET /trash?resourceType=space - List deleted spaces
• GET /trash?resourceType=base - List deleted bases
• DELETE /space/{spaceId}/permanent - Permanently delete space
• DELETE /base/{baseId}/permanent - Permanently delete base
• DELETE /trash/reset-items?resourceType=base&resourceId={baseId} - Empty base tables trash
• DELETE /trash/reset-items?resourceType=table&resourceId={tableId} - Empty table resources trash

However, the OAuth scope validation enum is missing the corresponding trash-related scopes needed to access these endpoints programmatically.

Expected Behavior

The OAuth scope enum should include:

• table|trash_read - For listing deleted items
• table|trash_update - For permanent deletion operations
• table|trash_reset - For bulk trash emptying operations

Request

Please add these three trash-related scopes to the OAuth scope validation enum so that OAuth applications can be granted proper permissions to manage trash programmatically.

The location of this code can be found here:

teable/packages/core/src/auth/oauth.ts

Lines 10 to 42 in fcf07dd

	export const OAUTH_ACTIONS: (
	| TableAction
	| ViewAction
	| FieldAction
	| RecordAction
	| UserAction
	| AutomationAction
	)[] = [
	'table|create',
	'table|delete',
	'table|export',
	'table|import',
	'table|read',
	'table|update',
	'view|create',
	'view|delete',
	'view|read',
	'view|update',
	'field|create',
	'field|delete',
	'field|read',
	'field|update',
	'record|comment',
	'record|create',
	'record|delete',
	'record|read',
	'record|update',
	'automation|create',
	'automation|delete',
	'automation|read',
	'automation|update',
	'user|email_read',
	];