feat: reduce scope to just openid

build-trust · Sep 2, 2024 · 0435887 · 0435887
1 parent 16b9279
commit 0435887
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/components/Auth/index.tsx b/src/components/Auth/index.tsx
@@ -26,6 +26,7 @@ const Auth0 = new Auth0Client({
   domain: publicRuntimeConfig.auth0.issuerBaseHost as string,
   clientId: publicRuntimeConfig.auth0.clientId as string,
   authorizationParams: {
+    scope: 'openid',
     redirect_uri: `${publicRuntimeConfig.auth0.baseUrl}/auth/callback`,
   },
 });
@@ -38,6 +39,7 @@ const currentUser = async (): Promise<User | void> => {
     const userId = window.sessionStorage.getItem('userId') as string | '';
     const token = await Auth0.getTokenSilently({
       authorizationParams: {
+        scope: 'openid',
         audience,
       },
     });
@@ -128,6 +130,7 @@ const Auth: FunctionComponent<Props> = ({
   const signin = useCallback(async (): Promise<void> => {
     await Auth0.loginWithRedirect({
       authorizationParams: {
+        scope: 'openid',
         audience,
         source: 'ockam-website',
       },
@@ -137,6 +140,7 @@ const Auth: FunctionComponent<Props> = ({
   const signup = useCallback(async (): Promise<void> => {
     await Auth0.loginWithRedirect({
       authorizationParams: {
+        scope: 'openid',
         audience,
         screen_hint: 'signup',
         source: 'ockam-website',