fix(providers): use openid scopes by default (#3651 )

2026-05-01 10:55:20 +00:00 · 2022-01-17 04:28:15 +01:00
1 changed files with 1 additions and 1 deletions
--- a/src/providers/azure-ad.ts
+++ b/src/providers/azure-ad.ts
@@ -28,7 +28,7 @@ export default function AzureAD<P extends Record<string, any> = AzureADProfile>(
    wellKnown: `https://login.microsoftonline.com/${tenant}/v2.0/.well-known/openid-configuration`,
    authorization: {
      params: {
-        scope: "User.Read",
+        scope: "openid profile email",
      },
    },
    async profile(profile, tokens) {