When using okta, scopes not used.

Created on 27 October 2023, 8 months ago

Similar to the issue I'd had on version 8 of this module ( https://www.drupal.org/project/openid_connect/issues/3313531 β†’ ), I find that when using OKTA, the user values are not copied over. I've set the scopes as "openid email profile" on the /openid-connect/okta/edit settings page, but they don't seem to be used.

I've found if I manually change src/Plugin/OpenIDConnectClientBase.php to include "profile" in the default scope, it works fine.

public function authorize(string $scope = 'openid email profile', array $additional_params = [])

I do see that the Event Subscriber calls $response = $client->authorize();, without passing the scopes value in EventSubscriber/OpenIDConnectAutoLogin.php...

Is that the disconnect?

As it's the openid_connect module that stores the scopes, should there be a check in the authorize function that retrieves the saved values and uses those?

Thanks

πŸ› Bug report
Status

Active

Version

3.0

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States kid_baco

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.69.0 2024