Problem/Motivation

Our current implementation of the OAuth authorization scopes captures more than is necessary for SSO.

Steps to reproduce

Observe the Drupal\social_auth_discord\DiscordAuthManager::getAuthorizationUrl() caries the following scopes:

  • identify
  • email
  • connections
  • guilds
  • guilds.join

Proposed resolution

Only identify and email are necessary for SSO. The user may add additional scopes if their implementation calls for it.

Remaining tasks

User interface changes

API changes

Data model changes

Issue fork social_auth_discord-3571411

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

jcandan created an issue. See original summary.

jcandan opened merge request !7

jcandan’s picture

jcandan commented
Status: Active » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

  • jcandan committed 977c4ed1 on 4.0.x 
    feat: #3571411 Remove non-SSO-necessary scopes

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.