Updated .env files in CRA templates to have the itwin-platform scope (

#333)

* Updated .env in CRA templates to have `itwin-platform` scope

* changelog

* rush update --full

* Revert "rush update --full"

This reverts commit 2bd9a13.

* pnpm overrides for packages with high severity vulnerabilities

common/changes/@itwin/cra-template-desktop-viewer/mindaugas-update-default-template-scopes_2024-10-31-11-22.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@itwin/cra-template-desktop-viewer",
+      "comment": "Updated .env file in CRA template to have the `itwin-platform` scope.",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@itwin/cra-template-desktop-viewer"
+}

common/changes/@itwin/cra-template-web-viewer/mindaugas-update-default-template-scopes_2024-10-31-11-22.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@itwin/cra-template-web-viewer",
+      "comment": "Updated .env file in CRA template to have the `itwin-platform` scope.",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@itwin/cra-template-web-viewer"
+}

common/config/rush/pnpm-config.json

@@ -6,6 +6,8 @@
       "braces": "^3.0.3",
       "path-to-regexp@>=0.2.0": "^8.0.0",
       "path-to-regexp@<0.1.10": "^0.1.10",
-      "postcss": "^8.4.31"
+      "postcss": "^8.4.31",
+      "http-proxy-middleware": "^2.0.7",
+      "rollup": "^2.79.2"
     }
   }

packages/templates/cra-template-desktop-viewer/template/.env

@@ -1,5 +1,5 @@
 # ---- Configuration ----
-ITWIN_VIEWER_SCOPE ="imodelaccess:read offline_access imodels:read itwins:read realitydata:read"
+ITWIN_VIEWER_SCOPE ="itwin-platform offline_access"
 ITWIN_VIEWER_CLIENT_ID=""
 ITWIN_VIEWER_REDIRECT_URI=""
 ITWIN_VIEWER_ISSUER_URL="https://ims.bentley.com"

packages/templates/cra-template-desktop-viewer/template/README.md

@@ -12,12 +12,7 @@ ITWIN_VIEWER_CLIENT_ID="native-xxxxxxxx"
 
 - You should generate a [client](https://developer.bentley.com/register/) to get started. The client that you generate should be for a desktop app and use the following list of apis. You can add the default redirect uri (http://localhost:3000/signin-callback).
 
-- Scopes expected by the viewer are:
-
-  - **Visualization**: `imodelaccess:read`
-  - **iModels**: `imodels:read`
-  - **Reality Data**: `realitydata:read`
-  - **Administration**: `itwins:read`
+- Viewer expects the `itwin-platform` scope to be set.
 
 ## Available Scripts
 

packages/templates/cra-template-web-viewer/template/.env

@@ -2,7 +2,7 @@
 IMJS_AUTH_CLIENT_CLIENT_ID = ""
 IMJS_AUTH_CLIENT_REDIRECT_URI = ""
 IMJS_AUTH_CLIENT_LOGOUT_URI = ""
-IMJS_AUTH_CLIENT_SCOPES ="imodelaccess:read imodels:read realitydata:read"
+IMJS_AUTH_CLIENT_SCOPES ="itwin-platform"
 IMJS_AUTH_AUTHORITY="https://ims.bentley.com"
 
 # ---- Test ids ----

packages/templates/cra-template-web-viewer/template/README.md

@@ -11,16 +11,12 @@ Prior to running the app, you will need to add OIDC client configuration to the
 IMJS_AUTH_CLIENT_CLIENT_ID=""
 IMJS_AUTH_CLIENT_REDIRECT_URI=""
 IMJS_AUTH_CLIENT_LOGOUT_URI=""
-IMJS_AUTH_CLIENT_SCOPES =""
+IMJS_AUTH_CLIENT_SCOPES=""
 ```
 
 - You can generate a [test client](https://developer.bentley.com/tutorials/web-application-quick-start/#3-register-an-application) to get started.
 
-- Scopes expected by the viewer are:
-
-  - **Visualization**: `imodelaccess:read`
-  - **iModels**: `imodels:read`
-  - **Reality Data**: `realitydata:read`
+- Viewer expects the `itwin-platform` scope to be set.
 
 - The application will use the path of the redirect URI to handle the redirection, it must simply match what is defined in your client.