diff --git a/config/initializers/3_omniauth.rb b/config/initializers/3_omniauth.rb index 1dc536c55c..d731c0fd5c 100644 --- a/config/initializers/3_omniauth.rb +++ b/config/initializers/3_omniauth.rb @@ -27,13 +27,9 @@ Devise.setup do |config| # OpenID Connect Strategy if Rails.configuration.omniauth.oidc_enabled - oidc_options = Rails.configuration.omniauth.oidc - config.omniauth( :openid_connect, - oidc_options.merge( - scope: oidc_options[:scope].split(',').map(&:to_sym) # Convert scope to symbol array - ) + Rails.configuration.omniauth.oidc ) end end diff --git a/config/omniauth.yml b/config/omniauth.yml index 3383d511c3..6a98ae8516 100644 --- a/config/omniauth.yml +++ b/config/omniauth.yml @@ -60,7 +60,9 @@ shared: issuer: <%= ENV.fetch('OIDC_ISSUER', nil) %> # NEED discovery: <%= ENV.fetch('OIDC_DISCOVERY', 'false') == 'true' %> # OPTIONAL (default: false) client_auth_method: <%= ENV.fetch('OIDC_CLIENT_AUTH_METHOD', nil) %> # OPTIONAL (default: basic) - scope: <%= ENV.fetch('OIDC_SCOPE', '') %> + scope: <% ENV.fetch('OIDC_SCOPE', '').split(',').each do |value| %> + - !ruby/symbol <%= value %> + <% end %> response_type: <%= ENV.fetch('OIDC_RESPONSE_TYPE', nil) %> # OPTIONAL (default: code) response_mode: <%= ENV.fetch('OIDC_RESPONSE_MODE', nil) %> # OPTIONAL (default: query) display: <%= ENV.fetch('OIDC_DISPLAY', nil) %> # OPTIONAL (default: page)