Merge pull request #27876 from backstage/blam/auth-scopes

googleAuth: `includeGrantedScopes` to persist scopes across refreshes

.changeset/stale-rats-tease.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend-module-google-provider': patch
+---
+
+Pass through `includeGrantedScopes` in order to persist scopes across refresh calls

plugins/auth-backend-module-google-provider/src/authenticator.ts

@@ -73,6 +73,7 @@ export const googleAuthenticator = createOAuthAuthenticator({
     return helper.start(input, {
       accessType: 'offline',
       prompt: 'consent',
+      includeGrantedScopes: 'true',
     });
   },
 

plugins/auth-backend-module-google-provider/src/module.test.ts

@@ -67,6 +67,7 @@ describe('authModuleGoogleProvider', () => {
       prompt: 'consent',
       response_type: 'code',
       client_id: 'my-client-id',
+      include_granted_scopes: 'true',
       redirect_uri: `http://localhost:${server.port()}/api/auth/google/handler/frame`,
       state: expect.any(String),
       scope: