Skip to content

Navigation Menu

Sign in
Sign up

[Studio OIDC & KeyCloak] Scopes requested at login stage are hardcoded #2091

Open

Description

When OIDC (OAuth2Provider or KeycloakOAuth2Provider) is used to authenticate users, scope lists asked during authentication are not defined, so, it seems that one used per default is :

  • openid
  • profile
  • email

Scopes are useful to get user information and map them to Tock roles.

It could be cool to have a property, for example, for keycloak tock keycloak scopes with default values (openid profile email) that can let the Ops define needs scopes.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      AltStyle によって変換されたページ (->オリジナル) /