BED-5178 fix: OIDC default scopes (#1041)

SpecterOps · Dec 24, 2024 · d4d10bf · d4d10bf
1 parent 348c669
commit d4d10bf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cmd/api/src/api/v2/auth/oidc.go b/cmd/api/src/api/v2/auth/oidc.go
@@ -124,7 +124,7 @@ func (s ManagementResource) OIDCLoginHandler(response http.ResponseWriter, reque
 			ClientID:    ssoProvider.OIDCProvider.ClientID,
 			Endpoint:    provider.Endpoint(),
 			RedirectURL: getRedirectURL(request, ssoProvider),
-			Scopes:      []string{"openid", "profile", "email", "email_verified", "name", "given_name", "family_name"},
+			Scopes:      []string{"openid", "profile", "email"},
 		}
 
 		// use PKCE to protect against CSRF attacks