Small change to make the scopes that are requested during login configurable per new flag 'oidc.scopes'.
Why: Service accounts without offline_access capabilities are unable to log in due to requesting offline_access without permissions. With this override one can omit 'offline_access' if required.
I kept the hardcoded values 'openid' and 'offline_access' as defaults on the flag to not introduce any breaking changes.
Small change to make the scopes that are requested during login configurable per new flag 'oidc.scopes'.
Why: Service accounts without offline_access capabilities are unable to log in due to requesting offline_access without permissions. With this override one can omit 'offline_access' if required.
I kept the hardcoded values 'openid' and 'offline_access' as defaults on the flag to not introduce any breaking changes.