feat(cli): change default OAuth scopes to email and profile#29
Conversation
- Update default scope from "read write" to "email profile" to align with OIDC standard scopes - Update test fixtures to match new default scope
Codecov Report❌ Patch coverage is
📢 Thoughts on this report? Let us know! |
There was a problem hiding this comment.
Pull request overview
Updates the CLI’s default OAuth scopes to better match common OIDC usage by switching from application-style scopes to identity/profile scopes.
Changes:
- Change the default scope value from
read writetoemail profilein configuration loading. - Update
--scopeflag help text to reflect the new default. - Update test fixtures in
main_test.goto use the new default.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| config.go | Updates the --scope help text and the resolved default SCOPE value to email profile. |
| main_test.go | Updates test configs to use the new default scope string. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| IntVar(&flagCallbackPort, "port", 0, "Local callback port for browser flow (default: 8888 or CALLBACK_PORT env)") | ||
| cmd.PersistentFlags(). | ||
| StringVar(&flagScope, "scope", "", "Space-separated OAuth scopes (default: \"read write\")") | ||
| StringVar(&flagScope, "scope", "", "Space-separated OAuth scopes (default: \"email profile\")") |
There was a problem hiding this comment.
The README still documents the default SCOPE env var value as read write (README.md:260). Since this flag help text now states the default is email profile, please update the README (and any other user-facing docs) to keep the documented defaults consistent.
Summary
read writetoemail profileto align with standard OIDC scopesTest plan
make testpassesmake lintpasses