From 751d574d751a0a4b8f9aac16eae0869b54d98425 Mon Sep 17 00:00:00 2001
From: HurracaineIke <michaelerudge@gmail.com>
Date: Wed, 15 Jul 2026 08:13:42 -0700
Subject: [PATCH] Update oauth2_pocketid.adoc

PocketID now requires to explicitly include the `openid` scope in the `scopes` list. PocketID will strictly block user information queries with a `403 Forbidden` if this scope is missing.
---
 docs/modules/ROOT/pages/security/oauth2_pocketid.adoc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/modules/ROOT/pages/security/oauth2_pocketid.adoc b/docs/modules/ROOT/pages/security/oauth2_pocketid.adoc
index 26418d1..73de16a 100644
--- a/docs/modules/ROOT/pages/security/oauth2_pocketid.adoc
+++ b/docs/modules/ROOT/pages/security/oauth2_pocketid.adoc
@@ -39,6 +39,7 @@ authOAuth2Providers:
     clientId: "[REDACTED]"
     clientSecret: "[REDACTED]"
     scopes:
+      - openid
       - profile
       - email
     usernameField: preferred_username
@@ -52,4 +53,4 @@ actions:
 
 == Pocket ID config
 
-image::pocketid.png[]
\ No newline at end of file
+image::pocketid.png[]