remove duplicate scope definition

scope can be defined both within the strategy declaration or when invoking passport

packages/auth/src/middleware/passport/oidc.js

@@ -110,8 +110,7 @@ exports.strategyFactory = async function (config, callbackUrl) {
         userInfoURL: body.userinfo_endpoint,
         clientID: clientId,
         clientSecret: clientSecret,
-        callbackURL: callbackUrl,
-        scope: "profile email",
+        callbackURL: callbackUrl
       },
       authenticate
     )

packages/worker/src/api/controllers/admin/auth.js

@@ -153,6 +153,7 @@ exports.oidcPreAuth = async (ctx, next) => {
   const strategy = await oidcStrategyFactory(ctx)
 
   return passport.authenticate(strategy, {
+    // required 'openid' scope is added by oidc strategy factory
     scope: ["profile", "email"],
   })(ctx, next)
 }