From cd1fb62d0fc42b36a5b65c9dd3612932c10773d5 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 8 Aug 2026 20:08:44 -0300 Subject: [PATCH] fix(hermes): request supported OIDC scopes --- services/hermes/oauth2-proxy.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/services/hermes/oauth2-proxy.yaml b/services/hermes/oauth2-proxy.yaml index 99c02e6b4..238396244 100644 --- a/services/hermes/oauth2-proxy.yaml +++ b/services/hermes/oauth2-proxy.yaml @@ -83,7 +83,7 @@ spec: - --oidc-issuer-url=https://sso.bstein.dev/realms/atlas - --user-id-claim=sub - --code-challenge-method=S256 - - --scope=openid profile email groups + - --scope=openid profile email - --email-domain=* - --authenticated-emails-file=/etc/oauth2-proxy/allowed-emails - --set-xauthrequest=true @@ -173,7 +173,7 @@ spec: - --oidc-issuer-url=https://sso.bstein.dev/realms/atlas - --user-id-claim=sub - --code-challenge-method=S256 - - --scope=openid profile email groups + - --scope=openid profile email - --email-domain=* - --authenticated-emails-file=/etc/oauth2-proxy/allowed-emails - --set-xauthrequest=true @@ -263,7 +263,7 @@ spec: - --oidc-issuer-url=https://sso.bstein.dev/realms/atlas - --user-id-claim=sub - --code-challenge-method=S256 - - --scope=openid profile email groups + - --scope=openid profile email - --email-domain=* - --set-xauthrequest=true - --pass-user-headers=true