Skip to content

[#2025] Defaulted OAuth login scopes choice to all scopes when user selects no scopes

Ivan Tashkinov requested to merge 2025-oauth-login-default-to-all-scopes into develop

Closes #2025 (closed)

In OAuth login form (result of GET /oauth/authorize — e.g. navigate to /web/login to make MastoFE redirect to login form), when user selects no scopes (which is hardened — user needs to edit the form in dev tools, so this is rather an edge case) and submits, OAuth login form is rendered again (with error) with all available scopes selected (previously blank selection was maintained which looked confusing in the UI).

Merge request reports