[PR #5071] [MERGED] fix(sso): OIDC scopes should fallback to provider scopes #14001

Closed
opened 2026-04-13 09:15:35 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/5071
Author: @Bekacru
Created: 10/3/2025
Status: Merged
Merged: 10/3/2025
Merged by: @Bekacru

Base: canaryHead: fix/sso-scopes


📝 Commits (1)

  • 2995294 fix(sso): oidc scopes should fallback to provider scopes

📊 Changes

1 file changed (+7 additions, -6 deletions)

View changed files

📝 packages/sso/src/index.ts (+7 -6)

📄 Description

closes #2360


Summary by cubic

Fix SSO OIDC scopes to use provider-defined scopes when none are provided, with a final fallback to the default set. This honors provider config and prevents mis-scoped authorization (Linear #2360).


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/5071 **Author:** [@Bekacru](https://github.com/Bekacru) **Created:** 10/3/2025 **Status:** ✅ Merged **Merged:** 10/3/2025 **Merged by:** [@Bekacru](https://github.com/Bekacru) **Base:** `canary` ← **Head:** `fix/sso-scopes` --- ### 📝 Commits (1) - [`2995294`](https://github.com/better-auth/better-auth/commit/299529445c43b0c8d52afb8ec11f0bb664c28a4a) fix(sso): oidc scopes should fallback to provider scopes ### 📊 Changes **1 file changed** (+7 additions, -6 deletions) <details> <summary>View changed files</summary> 📝 `packages/sso/src/index.ts` (+7 -6) </details> ### 📄 Description closes #2360 <!-- This is an auto-generated description by cubic. --> --- ## Summary by cubic Fix SSO OIDC scopes to use provider-defined scopes when none are provided, with a final fallback to the default set. This honors provider config and prevents mis-scoped authorization (Linear #2360). <!-- End of auto-generated description by cubic. --> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-13 09:15:35 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#14001