allow customizing OICD scopes

internal/api/v1/auth/oidc.go

@@ -9,6 +9,7 @@ import (
 	U "github.com/yusing/go-proxy/internal/api/v1/utils"
 	"github.com/yusing/go-proxy/internal/common"
 	E "github.com/yusing/go-proxy/internal/error"
+	"github.com/yusing/go-proxy/internal/utils/strutils"
 	"golang.org/x/oauth2"
 )
 
@@ -39,7 +40,7 @@ func InitOIDC(issuerURL, clientID, clientSecret, redirectURL string) error {
 		ClientSecret: clientSecret,
 		RedirectURL:  redirectURL,
 		Endpoint:     provider.Endpoint(),
-		Scopes:       []string{oidc.ScopeOpenID, "profile", "email"},
+		Scopes:       strutils.CommaSeperatedList(common.OIDCScopes),
 	}
 
 	return nil

internal/common/env.go

@@ -50,6 +50,7 @@ var (
 	OIDCClientID     = GetEnvString("OIDC_CLIENT_ID", "")
 	OIDCClientSecret = GetEnvString("OIDC_CLIENT_SECRET", "")
 	OIDCRedirectURL  = GetEnvString("OIDC_REDIRECT_URL", "")
+	OIDCScopes       = GetEnvString("OIDC_SCOPES", "openid, profile, email")
 )
 
 func GetEnv[T any](key string, defaultValue T, parser func(string) (T, error)) T {