refactor: remove additionalScopes from OIDC config push
Server now hardcodes Logto org scopes in the auth flow, so the provisioner no longer needs to push them via OIDC config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -142,11 +142,7 @@ public class VendorTenantService {
|
|||||||
"defaultRoles", List.of("VIEWER"),
|
"defaultRoles", List.of("VIEWER"),
|
||||||
"displayNameClaim", "name",
|
"displayNameClaim", "name",
|
||||||
"rolesClaim", "roles",
|
"rolesClaim", "roles",
|
||||||
"audience", "https://api.cameleer.local",
|
"audience", "https://api.cameleer.local"
|
||||||
"additionalScopes", List.of(
|
|
||||||
"urn:logto:scope:organizations",
|
|
||||||
"urn:logto:scope:organization_roles"
|
|
||||||
)
|
|
||||||
));
|
));
|
||||||
log.info("Pushed OIDC config to server for tenant {}", tenant.getSlug());
|
log.info("Pushed OIDC config to server for tenant {}", tenant.getSlug());
|
||||||
} catch (Exception e) {
|
} catch (Exception e) {
|
||||||
|
|||||||
Reference in New Issue
Block a user