Document new OAuth scopes (#2014)

* document new scopes

* Update docs/hub/oauth.md

Co-authored-by: Julien Chaumond <[email protected]>

* Update docs/hub/spaces-oauth.md

* Update docs/hub/oauth.md

Co-authored-by: vb <[email protected]>

* Apply suggestion from @coyotte508

---------

Co-authored-by: Julien Chaumond <[email protected]>
Co-authored-by: vb <[email protected]>

Author: 3 people

docs/hub/oauth.md

@@ -30,9 +30,12 @@ The currently supported scopes are:
 - `email`: Get the user's email address.
 - `read-billing`: Know whether the user has a payment method set up.
 - `read-repos`: Get read access to the user's personal repos.
+- `contribute-repos`: Can create repositories and access those created by this app. Cannot access any other repositories unless additional permissions are granted.
 - `write-repos`: Get write/read access to the user's personal repos.
 - `manage-repos`: Get full access to the user's personal repos. Also grants repo creation and deletion.
-- `inference-api`: Get access to the [Inference API](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user.
+- `inference-api`: Get access to the [Inference Providers](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user.
+- `jobs`: Run [jobs](https://huggingface.co/docs/huggingface_hub/main/en/guides/jobs) 
+- `webhooks`: Manage [webhooks](https://huggingface.co/docs/huggingface_hub/main/en/guides/webhooks)
 - `write-discussions`: Open discussions and Pull Requests on behalf of the user as well as interact with discussions (including reactions, posting/editing comments, closing discussions, ...). To open Pull Requests on private repos, you need to request the `read-repos` scope as well.
 
 All other information is available in the [OpenID metadata](https://huggingface.co/.well-known/openid-configuration).

docs/hub/spaces-oauth.md

@@ -73,9 +73,12 @@ Those scopes are optional and can be added by setting `hf_oauth_scopes` in your
 - `email`: Get the user's email address.
 - `read-billing`: Know whether the user has a payment method set up.
 - `read-repos`: Get read access to the user's personal repos.
+- `contribute-repos`: Can create repositories and access those created by this app. Cannot access any other repositories unless additional permissions are granted.
 - `write-repos`: Get write/read access to the user's personal repos.
 - `manage-repos`: Get full access to the user's personal repos. Also grants repo creation and deletion.
-- `inference-api`: Get access to the [Inference API](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user.
+- `inference-api`: Get access to the [Inference Providers](https://huggingface.co/docs/inference-providers/index), you will be able to make inference requests on behalf of the user.
+- `jobs`: Run [jobs](https://huggingface.co/docs/huggingface_hub/main/en/guides/jobs) 
+- `webhooks`: Manage [webhooks](https://huggingface.co/docs/huggingface_hub/main/en/guides/webhooks)
 - `write-discussions`: Open discussions and Pull Requests on behalf of the user as well as interact with discussions (including reactions, posting/editing comments, closing discussions, ...). To open Pull Requests on private repos, you need to request the `read-repos` scope as well.
 
 ## Accessing organization resources