Grant

[plmercereau]

Improvements

• Providers are defined in one single place so it is easier to add new ones
• Fix Twitter provider #100
• Fetch display name from the Strava provider
• Fetch the user locale when available (Discord, Google, LinkedIn, WorkOS)
• Fetch the email verification status when available (Apple, BitBucket, Discord, GitHub, Google)
• Fetch avatar url from BitBucket
• The service starts when a provider is incorrectly configured. Instead, the endpoint fails with a standard error. The error is logged (warn level)
• Custom scopes set as environment variables don't replace the scopes that are required by Hasura-auth to function. They are appended instead.
• Profile transformation unit tests

Deviations

• Don't send the refresh token in the url hash anymore (deprecated since ~6 months)
• Emails that are not explicitly flagged by the provider as verified are not set as verified in the database

To be considered

• [ ] Implement the disable sign-up feature
• [ ] Ask anyone that contributed in adding an OAuth provider to test this PR
• [ ] End-to-end tests (requires quite a significant amount of work)

[changeset-bot[bot]]

🦋 Changeset detected

Latest commit: fd411579ca5c5e0f19a953c98c061c0eee642eb0

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

| Name | Type | | ----------- | ----- | | hasura-auth | Minor |

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR