For legacy flow, the scope should default to openid

auth0 · Jan 10, 2017 · bf10dea · bf10dea
1 parent 1cfed1a
commit bf10dea
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/core/index.js b/src/core/index.js
@@ -242,7 +242,8 @@ function extractAuthOptions(options) {
     throw new Error("It is not posible to request an 'id_token' while using popup mode.");
   }
 
-  if (oidcConformant && !params.scope) {
+  // for legacy flow, the scope should default to openid
+  if (!oidcConformant && !params.scope) {
     params.scope = 'openid';
   }