don't use offline_access scope for implicit since it doesn't generate…

… an authorization code
BeryJu · Jan 1, 2024 · 4eff42a · 4eff42a
1 parent c5bd523
commit 4eff42a
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/pkg/implicit.go b/pkg/implicit.go
@@ -34,7 +34,15 @@ func (c *OIDCClient) implicit(w http.ResponseWriter, r *http.Request) {
 		ClientID:     c.config.ClientID,
 		DiscoveryURL: c.providerURL,
 		RootURL:      c.rootURL,
-		Scopes:       strings.Join(getScopes(), " "),
+		Scopes: strings.TrimSpace(
+			strings.ReplaceAll(
+				strings.Join(
+					getScopes(), " ",
+				),
+				"offline_access",
+				"",
+			),
+		),
 	}
 	err := tmpl.Execute(w, context)
 	if err != nil {