diff --git a/packages/wallet/wdk/src/sequence/handlers/authcode.ts b/packages/wallet/wdk/src/sequence/handlers/authcode.ts index f73f9ec5d..13c035c0f 100644 --- a/packages/wallet/wdk/src/sequence/handlers/authcode.ts +++ b/packages/wallet/wdk/src/sequence/handlers/authcode.ts @@ -45,11 +45,12 @@ export class AuthCodeHandler extends IdentityHandler implements Handler { isSignUp, }) + const scope = this.signupKind === 'apple' ? 'name email' : 'openid profile email' const searchParams = new URLSearchParams({ client_id: this.audience, redirect_uri: this.redirectUri, response_type: 'code', - scope: 'openid profile email', + scope, state, }) diff --git a/packages/wallet/wdk/test/authcode.test.ts b/packages/wallet/wdk/test/authcode.test.ts index 4874e475b..801547b11 100644 --- a/packages/wallet/wdk/test/authcode.test.ts +++ b/packages/wallet/wdk/test/authcode.test.ts @@ -311,6 +311,8 @@ describe('AuthCodeHandler', () => { expect(result).toContain('https://appleid.apple.com/auth/authorize?') expect(result).toContain('client_id=apple-client-id') + const resultUrl = new URL(result) + expect(resultUrl.searchParams.get('scope')).toBe('name email') }) it('Should create commitment without signer', async () => {