fix: default GitLab OAuth scope to "read_user" when unset

appleboy · appleboy · commit 1760e5742c80 · 2025-10-07T16:18:57.000+08:00
- Set the default OAuth scope to "read_user" for GitLab when no scopes are provided

Signed-off-by: Bo-Yi Wu &lt;appleboy.tw@gmail.com&gt;
diff --git a/03-oauth-mcp/oauth-server/provider_gitlab.go b/03-oauth-mcp/oauth-server/provider_gitlab.go
@@ -58,6 +58,9 @@ func (g *GitLabProvider) GetAuthorizeURL(clientID, state, redirectURI, scopes, c
 
 	if scopes != "" {
 		values.Set("scope", scopes)
+	} else {
+		// GitLab default scope
+		values.Set("scope", "read_user")
 	}
 
 	if codeChallenge != "" {

Original file line number	Diff line number	Diff line change
`@@ -58,6 +58,9 @@ func (g *GitLabProvider) GetAuthorizeURL(clientID, state, redirectURI, scopes, c`
`58`	`58`
`59`	`59`	`if scopes != "" {`
`60`	`60`	`values.Set("scope", scopes)`
	`61`	`+ } else {`
	`62`	`+ // GitLab default scope`
	`63`	`+ values.Set("scope", "read_user")`
`61`	`64`	`}`
`62`	`65`
`63`	`66`	`if codeChallenge != "" {`