What changed
Existing tokens 403. This needs user re-consent, not a code change, so it cannot be fixed by deploying.
Affects POST /cra/check_report/base_report/get. Scopes now: oauth2. This is the one category you cannot fix by shipping code, so it needs lead time.
requires cra:read
Who is affected
Code that calls POST /cra/check_report/base_report/get.
Before and after
| Where | Before | After |
|---|---|---|
| POST /cra/check_report/base_report/get | oauth2 | oauth2 |
| POST /cra/check_report/cashflow_insights/get | oauth2 | oauth2 |
| POST /cra/check_report/income_insights/get | oauth2 | oauth2 |
| POST /cra/check_report/lend_score/get | oauth2 | oauth2 |
| POST /cra/check_report/network_insights/get | oauth2 | oauth2 |
Based on Plaid’s published API specification. How severity is decided.