generated: '2026-07-11'
method: searched
source: openapi/fossology-openapi.yml
docs: https://github.com/fossology/fossology/wiki/FOSSology-REST-API
schemes:
- name: oauth
  source: openapi/fossology-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://api.example.com/oauth2/authorize
  description: Machine-2-Machine communication from oauth
scopes:
- scope: read
  description: Read-only access to the FOSSology REST API, allowing retrieval of
    information without creating or modifying data. Requested as token_scope when
    generating a token via POST /tokens and carried in the JWT scope claim.
  sources:
  - https://github.com/fossology/fossology/wiki/FOSSology-REST-API
- scope: write
  description: Read-write access to the FOSSology REST API, allowing creation and
    modification of data such as uploads, jobs, and clearing decisions. Requested
    as token_scope when generating a token via POST /tokens and carried in the JWT
    scope claim.
  sources:
  - https://github.com/fossology/fossology/wiki/FOSSology-REST-API
note: FOSSology authenticates with JWT bearer tokens (or OIDC machine-to-machine
  tokens) whose scope is limited to read or write; it does not publish a finer-grained
  OAuth scope catalog (https://github.com/fossology/fossology/wiki/FOSSology-REST-API).