From 50d2a211e5248c3e24523a5da418ab370c010099 Mon Sep 17 00:00:00 2001
From: mauriceboe <mauriceboe@icloud.com>
Date: Sat, 4 Apr 2026 12:53:12 +0200
Subject: [PATCH] fix(oidc): revert default scope to 'openid email profile'

Removes 'groups' from the default OIDC_SCOPE fallback, which caused
invalid_scope errors with providers that don't support it (e.g. Google).

Fixes #391
---
 server/src/routes/oidc.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/src/routes/oidc.ts b/server/src/routes/oidc.ts
index 338c4bd..dc01827 100644
--- a/server/src/routes/oidc.ts
+++ b/server/src/routes/oidc.ts
@@ -43,7 +43,7 @@ router.get('/login', async (req: Request, res: Response) => {
       response_type: 'code',
       client_id: config.clientId,
       redirect_uri: redirectUri,
-      scope: process.env.OIDC_SCOPE || 'openid email profile groups',
+      scope: process.env.OIDC_SCOPE || 'openid email profile',
       state,
     });