Changing requested scopes for OIDC connections?

[InputUsername]

For OIDC connections, it seems that Jackson always requests at least the openid email profile scopes from the IdP, with no ability to only request openid email. When using Google as an IdP, this results in a message stating "To continue, Google will share your name, email address, language preference, and profile picture with <app>." even though I only really need the name in my app.

I'm using Nextjs/NextAuth to connect to Jackson and I've tried passing openid email as the scope, but no luck. Passing in different scopes (through NextAuth) results in them being added on top of openid email profile, from what I can see. I'm wondering if this is intended behavior or if I'm doing something wrong? Thanks!

[deepakprabhakara]

Thanks for reporting this @InputUsername. @niwsa Can you take a look please.

[niwsa]

@InputUsername This is being sorted out in PR #2436

[InputUsername]

Great, thank you!

[deepakprabhakara]

@InputUsername Available in v1.21.2, you can set OPENID_REQUEST_PROFILE_SCOPE to false - https://boxyhq.com/docs/jackson/deploy/env-variables#openid_request_profile_scope

[InputUsername]

Perfect, thanks!