validate token scope

awx/main/tests/unit/api/serializers/test_token_serializer.py

@@ -0,0 +1,14 @@
+import pytest
+
+from awx.api.serializers import OAuth2TokenSerializer
+
+
+@pytest.mark.parametrize('scope, expect', [
+    ('', False),
+    ('read', True),
+    ('read read', False),
+    ('write read', True),
+    ('read rainbow', False)
+])
+def test_invalid_scopes(scope, expect):
+    assert OAuth2TokenSerializer()._is_valid_scope(scope) is expect