fix: Use ApiFullAccess as required scope for NoAccessToken endpoints

src/api/router/auth.rs

@@ -261,9 +261,11 @@ async fn check<R: IncomingRequest<Authentication = Self> + Any>(
 			})?;
 
 		if let Some(authentication) = authentication {
-			check_access_token(services, &authentication, query, TypeId::of::<R>(), &[])
-				.await
-				.map(Some)
+			check_access_token(services, &authentication, query, TypeId::of::<R>(), &[
+				OAuthClientScope::ApiFullAccess,
+			])
+			.await
+			.map(Some)
 		} else {
 			Ok(None)
 		}