diff --git a/src/Http/Controllers/Auth/SsoController.php b/src/Http/Controllers/Auth/SsoController.php index c35e91b89..2b438007e 100644 --- a/src/Http/Controllers/Auth/SsoController.php +++ b/src/Http/Controllers/Auth/SsoController.php @@ -77,6 +77,11 @@ public function redirectToProvider($profile = null) $used_scopes = $token->scopes; } + if (count($used_scopes) > 1){ + if (($key = array_search('publicData', $used_scopes)) !== false) { + unset($used_scopes[$key]); + } + } // Store the scopes we are sending to CCP in the session so we can // validate the JWT response contains the right scopes. session()->put('scopes', $used_scopes);