Should be using "openid" scope instead of "api" scope.

Open stephen-smith opened this issue 8 years ago • 0 comments

https://github.com/davido/gerrit-oauth-provider/blob/90b66bbf374fe4575b829eb41d940556060fda31/src/main/java/com/googlesource/gerrit/plugins/oauth/GitLabOAuthService.java#L49

Gerrit doesn't need "Full access to GitLab as the user, including read/write on all their groups and projects", it just needs to verify the user exists.

Mar 03 '18 02:03 stephen-smith