From adf14c4c4314a25543525620b0582ff7a0355f57 Mon Sep 17 00:00:00 2001
From: Ryan Manny <rmanny@apptio.com>
Date: Wed, 10 Feb 2021 11:16:26 -0800
Subject: [PATCH] Bump plugin-auth-backend to a minor change, add documentation
 for fixing it

---
 .changeset/breezy-moles-reply.md | 34 ++++++++++++++++++++++++++++++--
 1 file changed, 32 insertions(+), 2 deletions(-)

diff --git a/.changeset/breezy-moles-reply.md b/.changeset/breezy-moles-reply.md
index 050fd04c9d..2bc90e5ff0 100644
--- a/.changeset/breezy-moles-reply.md
+++ b/.changeset/breezy-moles-reply.md
@@ -1,6 +1,36 @@
 ---
 '@backstage/core': patch
-'@backstage/plugin-auth-backend': patch
+'@backstage/plugin-auth-backend': minor
 ---
 
-Change default scopes used for OIDC auth provider, remove undocumented scope
+Remove undocumented scope (default) from the OIDC auth provider which was breaking some identity services. If your app relied on this scope, you can readd it by adding a new factory in `packages/app/src/apis.ts`:
+
+```
+export const apis = [
+  createApiFactory({
+    api: oidcAuthApiRef,
+    deps: {
+      discoveryApi: discoveryApiRef,
+      oauthRequestApi: oauthRequestApiRef,
+      configApi: configApiRef,
+    },
+    factory: ({ discoveryApi, oauthRequestApi, configApi }) =>
+      OAuth2.create({
+        discoveryApi,
+        oauthRequestApi,
+        provider: {
+          id: 'oidc',
+          title: 'Your Identity Provider',
+          icon: OAuth2Icon,
+        },
+        defaultScopes: [
+          'default',
+          'openid',
+          'email',
+          'offline_access',
+        ],
+        environment: configApi.getOptionalString('auth.environment'),
+      }),
+  }),
+]
+```