Dan MilneandClaude Opus 4.8
6c4be7199c
The supported-scope list lived on OidcController, so the device authorization controller (and a test) had to reach across into OidcController::SUPPORTED_SCOPES. Move it to a shared OidcScopes::SUPPORTED module — one source of truth for the OIDC controller, the device flow, and consent handling — and update every reference. No behavior change. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016Q4ATZHoMCWqvSpE2yYoie
8 lines
339 B
Ruby
8 lines
339 B
Ruby
# Single source of truth for the OAuth/OIDC scopes this IdP supports. Shared by
|
|
# the OIDC controller (discovery + authorize/consent), the device authorization
|
|
# flow, and consent handling, so no controller has to reach into another for the
|
|
# list.
|
|
module OidcScopes
|
|
SUPPORTED = %w[openid profile email groups offline_access].freeze
|
|
end
|