fix onelogin auth

Signed-off-by: Matteo Silvestri <matteosilv@gmail.com>

packages/core-app-api/src/apis/implementations/auth/onelogin/OneLoginAuth.ts

@@ -76,7 +76,7 @@ export default class OneLoginAuth {
       oauthRequestApi,
       provider,
       environment,
-      defaultScopes: ['openid', 'email', 'profile', 'offline_access'],
+      defaultScopes: ['openid', 'email', 'profile'],
       scopeTransform(scopes) {
         return scopes.map(scope => {
           if (OIDC_SCOPES.has(scope)) {

plugins/auth-backend-module-onelogin-provider/src/authenticator.ts

@@ -58,6 +58,7 @@ export const oneLoginAuthenticator = createOAuthAuthenticator({
   },
 
   async start(input, helper) {
+    input.scope = 'openid email profile';
     return helper.start(input, {
       accessType: 'offline',
       prompt: 'consent',