dkam/clinch
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

Extract OidcScopes::SUPPORTED as the shared scope list

Browse Source 
The supported-scope list lived on OidcController, so the device authorization
controller (and a test) had to reach across into OidcController::SUPPORTED_SCOPES.
Move it to a shared OidcScopes::SUPPORTED module — one source of truth for the
OIDC controller, the device flow, and consent handling — and update every
reference. No behavior change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016Q4ATZHoMCWqvSpE2yYoie
This commit is contained in:
Dan Milne
2026-07-19 14:42:39 +10:00
co-authored by Claude Opus 4.8
parent f65f8da2e7
commit 6c4be7199c
4 changed files with 13 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/models/oidc_scopes.rb
+7
View File
@@ -0,0 +1,7 @@
# Single source of truth for the OAuth/OIDC scopes this IdP supports. Shared by
# the OIDC controller (discovery + authorize/consent), the device authorization
# flow, and consent handling, so no controller has to reach into another for the
# list.
module OidcScopes
SUPPORTED = %w[openid profile email groups offline_access].freeze
end