relaxing current static token support.

Author: Sachin Maheshwari

.circleci/config.yml

@@ -82,7 +82,7 @@ workflows:
       - "build-dev":
           filters:
             branches:
-              only: ['dev']
+              only: ['dev','feature/m2mtoken-support']
       - "build-prod":
           filters:
             branches:

common/helper.js

@@ -192,10 +192,9 @@ function validateEventPayload (event) {
 function verifyTokenScope(req, scope) {
   const isMachineToken = _.get(req, 'authUser.isMachine', false);
   const scopes = _.get(req, 'authUser.scopes', []);
-  if (isMachineToken && (_.indexOf(scopes, scope) >= 0)) {
-    return true;
+  if (isMachineToken && !(_.indexOf(scopes, scope) >= 0)) {
+    throw createError.Unauthorized("Check your token scope.")
   }
-  throw createError.Unauthorized("Check your token scope.")
 }
 
 module.exports = {