New: user can decide scopes to use, when using login() to obtain a new token - defaults to read-only scopes

Ref: #3

Author: gboudreau

setup.py

@@ -3,7 +3,7 @@
 setuptools.setup(
     name = 'WS-API',
     packages = ['ws_api'],
-    version = '0.7.0',
+    version = '0.8.0',
     license = 'GPL-3.0',
     description = 'Access your Wealthsimple account using their (GraphQL) API.',
     author = 'Guillaume Boudreau',

ws_api/wealthsimple_api.py

@@ -147,14 +147,17 @@ def check_oauth_token(self, persist_session_fct: Optional[Callable[[WSAPISession
 
         raise ManualLoginRequired("OAuth token invalid and cannot be refreshed.")
 
+    SCOPE_READ_ONLY = 'invest.read trade.read tax.read'
+    SCOPE_READ_WRITE = 'invest.read trade.read tax.read invest.write trade.write tax.write'
+
     def login_internal(self, username: str, password: str, otp_answer: str = None,
-                       persist_session_fct: callable = None) -> WSAPISession:
+                       persist_session_fct: callable = None, scope: str = SCOPE_READ_ONLY) -> WSAPISession:
         data = {
             'grant_type': 'password',
             'username': username,
             'password': password,
             'skip_provision': 'true',
-            'scope': 'invest.read invest.write trade.read trade.write tax.read tax.write',
+            'scope': scope,
             'client_id': self.session.client_id,
             'otp_claim': None,
         }
@@ -246,9 +249,9 @@ def get_token_info(self):
         return self.session.token_info
 
     @staticmethod
-    def login(username: str, password: str, otp_answer: str = None, persist_session_fct: callable = None):
+    def login(username: str, password: str, otp_answer: str = None, persist_session_fct: callable = None, scope: str = SCOPE_READ_ONLY):
         ws = WealthsimpleAPI()
-        return ws.login_internal(username, password, otp_answer, persist_session_fct)
+        return ws.login_internal(username, password, otp_answer, persist_session_fct, scope)
 
     @staticmethod
     def from_token(sess: WSAPISession, persist_session_fct: callable = None):