Allow collection scopes as valid during auth

app/js/auth/utils.js

@@ -36,13 +36,12 @@ export function validateScopes(scopes: Array<string>): boolean {
     return true
   }
 
-  let valid = false
+  let valid = true
   for (let i = 0; i < scopes.length; i++) {
     const scope = scopes[i]
-    if (VALID_SCOPES[scope] === true) {
-      valid = true
-    } else {
-      return false
+    const isCollectionScope = scope.indexOf('collection.') === 0
+    if (!isCollectionScope && VALID_SCOPES[scope] !== true) {
+      valid = false
     }
   }
   return valid

test/auth/utils.js

@@ -16,7 +16,7 @@ describe('auth-utils', () => {
     })
 
     it('should return false for a scope not on whitelist array', () => {
-      const scopes = ['illegal_scope']
+      const scopes = ['illegal_scope', 'store_write']
       assert(!validateScopes(scopes))
     })
 
@@ -33,6 +33,11 @@ describe('auth-utils', () => {
       scopes = ['email', 'store_write']
       assert(validateScopes(scopes))
     })
+
+    it('should allow colleciton scopes', () => {
+      const scopes = ['store_write', 'collection.contact']
+      assert(validateScopes(scopes))
+    })
   })
 
   describe('appRequestSupportsDirectHub', () => {