fix(auth): make authentication scope for Pages configurable

This MR makes required authentication permission scope for
Pages configurable.

By default, Pages will use `api` scope to authenticate with
Pages Application registered on GitLab.

With this MR, the scope is configurable and can be set to `read_api`
by providing the `auth-scope` variable in the arguments or in
the `gitlab-pages.conf`

/label ~security

Changelog: added

1 files changed, 1 insertions, 1 deletions

diff --git a/app.go b/app.go
index 096a1c28..0a6f0cd4 100644
--- a/app.go
+++ b/app.go
@@ -537,7 +537,7 @@ func (a *theApp) setAuth(config appConfig) {
 
 	var err error
 	a.Auth, err = auth.New(config.Domain, config.StoreSecret, config.ClientID, config.ClientSecret,
-		config.RedirectURI, config.GitLabServer)
+		config.RedirectURI, config.GitLabServer, config.AuthScope)
 	if err != nil {
 		log.WithError(err).Fatal("could not initialize auth package")
 	}