diff --git a/.changeset/breezy-moles-reply.md b/.changeset/breezy-moles-reply.md index 050fd04c9d..2bc90e5ff0 100644 --- a/.changeset/breezy-moles-reply.md +++ b/.changeset/breezy-moles-reply.md @@ -1,6 +1,36 @@ --- '@backstage/core': patch -'@backstage/plugin-auth-backend': patch +'@backstage/plugin-auth-backend': minor --- -Change default scopes used for OIDC auth provider, remove undocumented scope +Remove undocumented scope (default) from the OIDC auth provider which was breaking some identity services. If your app relied on this scope, you can readd it by adding a new factory in `packages/app/src/apis.ts`: + +``` +export const apis = [ + createApiFactory({ + api: oidcAuthApiRef, + deps: { + discoveryApi: discoveryApiRef, + oauthRequestApi: oauthRequestApiRef, + configApi: configApiRef, + }, + factory: ({ discoveryApi, oauthRequestApi, configApi }) => + OAuth2.create({ + discoveryApi, + oauthRequestApi, + provider: { + id: 'oidc', + title: 'Your Identity Provider', + icon: OAuth2Icon, + }, + defaultScopes: [ + 'default', + 'openid', + 'email', + 'offline_access', + ], + environment: configApi.getOptionalString('auth.environment'), + }), + }), +] +```