Remove unecessary default scopes for IDP integration (#686)

Alevsk · web-flow · commit 26bcbb896a9d · 2021-04-08T14:04:32.000-07:00
diff --git a/pkg/auth/idp/oauth2/config.go b/pkg/auth/idp/oauth2/config.go
@@ -69,7 +69,7 @@ func getSaltForIdpHmac() string {
 
 // getIdpScopes return default scopes during the IDP login request
 func getIdpScopes() string {
-	return env.Get(ConsoleIDPScopes, "openid,profile,app_metadata,user_metadata,email")
+	return env.Get(ConsoleIDPScopes, "openid,profile,email")
 }
 
 // getIdpTokenExpiration return default token expiration for access token (in seconds)

Original file line number	Diff line number	Diff line change
`@@ -69,7 +69,7 @@ func getSaltForIdpHmac() string {`
`69`	`69`
`70`	`70`	`// getIdpScopes return default scopes during the IDP login request`
`71`	`71`	`func getIdpScopes() string {`
`72`		`- return env.Get(ConsoleIDPScopes, "openid,profile,app_metadata,user_metadata,email")`
	`72`	`+ return env.Get(ConsoleIDPScopes, "openid,profile,email")`
`73`	`73`	`}`
`74`	`74`
`75`	`75`	`// getIdpTokenExpiration return default token expiration for access token (in seconds)`