feat: configurable scopes and issuer check skipping

2023-11-06 15:57:27 +01:00
parent 000b7c8cf4
commit e16b905bca
4 changed files with 33 additions and 21 deletions
--- a/cmd/server/container.go
+++ b/cmd/server/container.go
@ -92,8 +92,9 @@ func getServiceContainer(ctx context.Context, conf *config.Config) (*service.Con
 	ctn.Provide(oidc.ServiceName, oidc.ServiceProvider(
 		oidc.WithCredentials(conf.OIDC.ClientID, conf.OIDC.ClientSecret),
 		oidc.WithProvider(provider),
-		oidc.WithScopes("email", "openid"),
+		oidc.WithScopes(conf.OIDC.Scopes...),
 		oidc.WithAcrValues(conf.OIDC.AcrValues),
+		oidc.WithSkipIssuerCheck(conf.OIDC.SkipIssuerVerification),
 	))

 	return ctn, nil