Skip to content
Snippets Groups Projects
Commit 066ec76d authored by Gabriel Zachmann's avatar Gabriel Zachmann
Browse files

always request openid scope

parent d9587630
No related branches found
No related tags found
No related merge requests found
......@@ -72,6 +72,9 @@ func GetAuthorizationURL(provider *config.ProviderConf, oState, pkceChallenge st
} else if !utils.StringInSlice(oidc.ScopeOfflineAccess, oauth2Config.Scopes) {
oauth2Config.Scopes = append(oauth2Config.Scopes, oidc.ScopeOfflineAccess)
}
if !utils.StringInSlice(oidc.ScopeOpenID, oauth2Config.Scopes) { // if user deselected openid scope in restriction, we still need it
oauth2Config.Scopes = append(oauth2Config.Scopes, oidc.ScopeOpenID)
}
auds := restrictions.GetAudiences()
if len(auds) > 0 {
additionalParams = append(additionalParams,
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment