Testing delegated auth workflow.

ministryofjustice · Nov 23, 2023 · 55ed761 · 55ed761
1 parent 440605a
commit 55ed761
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/app.py b/app/app.py
@@ -57,10 +57,10 @@
 azure = oauth.register(
     "azure",
     client_id=secrets["client_id"],
-    client_secret=secrets["client_secret"],
+    # client_secret=secrets["client_secret"],
     server_metadata_url=f'https://login.microsoftonline.com/{secrets["tenant_id"]}/v2.0/.well-known/openid-configuration',
     client_kwargs={
-        "scope": "openid email profile User.ReadWrite.All Group.ReadWrite.All offline_access",
+        "scope": "openid email profile Group.ReadWrite.All offline_access",
     },
 )