From 9cda832b82bf79307e65d293860f9ba5ad531e0b Mon Sep 17 00:00:00 2001
From: Simon <s.thiessen@local-it.org>
Date: Wed, 3 Dec 2025 22:02:23 +0100
Subject: [PATCH] fix: request scopes email and profile

---
 lib/accounts/user.ex | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/accounts/user.ex b/lib/accounts/user.ex
index 3b7e80b..dbc62b2 100644
--- a/lib/accounts/user.ex
+++ b/lib/accounts/user.ex
@@ -54,6 +54,9 @@ defmodule Mv.Accounts.User do
         auth_method :client_secret_jwt
         code_verifier true
 
+        # Request email and profile scopes from OIDC provider (required for Authentik, Keycloak, etc.)
+        authorization_params scope: "openid email profile"
+
         # id_token_signed_response_alg "EdDSA" #-> https://git.local-it.org/local-it/mitgliederverwaltung/issues/87
       end