@vercel/connect 0.0.4-alpha.7 → 0.0.4-alpha.8

package/README.md

@@ -313,7 +313,7 @@ export const auth = betterAuth({
 | -------------------- | ----------------------- | ----------------------------------------------------------------------------------------------------- |
 | `id`                 | `string`                | Provider id used by Better Auth's generic OAuth plugin. Surfaces in the sign-in URL and account rows. |
 | `connector`          | `string`                | Vercel Connect connector identifier — accepts `scl_...` or the human-readable UID.                    |
-| `scopes`             | `readonly string[]`     | Scopes to request. `offline_access` is added automatically. Defaults to `["*"]`.                      |
+| `scopes`             | `readonly string[]`     | Scopes to request. `offline_access` is added automatically. Defaults to `["openid"]`.                 |
 | `getVercelOidcToken` | `() => Promise<string>` | Override the OIDC token fetcher. Defaults to `getVercelOidcToken` from `@vercel/oidc`.                |
 
 When the OIDC token is readable, the helper scopes the Vercel Connect consent UI to the deployment's Vercel team (`?teamId=...` on the authorization URL); outside Vercel it falls back to the unqualified URL.
@@ -354,7 +354,7 @@ export const authConfig: AuthConfig = {
 | `id`                 | `string`                | Provider id surfaced by Auth.js. Becomes the path segment in callback URLs and the `provider` field on accounts. |
 | `name`               | `string`                | Human-readable display name used by Auth.js sign-in UIs.                                                         |
 | `connector`          | `string`                | Vercel Connect connector identifier — accepts `scl_...` or the human-readable UID.                               |
-| `scopes`             | `readonly string[]`     | Scopes to request. `offline_access` is added automatically. Defaults to `["*"]`.                                 |
+| `scopes`             | `readonly string[]`     | Scopes to request. `offline_access` is added automatically. Defaults to `["openid"]`.                            |
 | `getVercelOidcToken` | `() => Promise<string>` | Override the OIDC token fetcher. Defaults to `getVercelOidcToken` from `@vercel/oidc`.                           |
 
 #### `ConnectProfile`

package/dist/authjs/connect-provider.d.ts

@@ -26,7 +26,7 @@ export interface AuthJsConnectOptions {
     /**
      * Scopes to request. `offline_access` is added automatically so
      * the Vercel Connect side can mint refresh tokens. Defaults to
-     * `["*"]`.
+     * `["openid"]`.
      */
     readonly scopes?: readonly string[];
     /**

package/dist/authjs/connect-provider.js

@@ -35,7 +35,7 @@ const CONNECT_USERINFO_URL = "https://connect.vercel.com/oauth/userinfo";
  */
 export function connect(options) {
     const fetchVercelToken = options.getVercelOidcToken ?? getVercelOidcToken;
-    const scope = Array.from(new Set([...(options.scopes ?? ["*"]), "offline_access"])).join(" ");
+    const scope = Array.from(new Set([...(options.scopes ?? ["openid"]), "offline_access"])).join(" ");
     return {
         id: options.id,
         name: options.name,

package/dist/betterauth/connect-provider.d.ts

@@ -15,7 +15,7 @@ export interface BetterAuthConnectOptions {
     readonly connector: string;
     /**
      * Scopes to request. `offline_access` is added automatically so the
-     * Vercel Connect side can mint refresh tokens. Defaults to `["*"]`.
+     * Vercel Connect side can mint refresh tokens. Defaults to `["openid"]`.
      */
     readonly scopes?: readonly string[];
     /**

package/dist/betterauth/connect-provider.js

@@ -39,7 +39,7 @@ const CONNECT_USERINFO_URL = "https://connect.vercel.com/oauth/userinfo";
  */
 export function connect(options) {
     const fetchVercelToken = options.getVercelOidcToken ?? getVercelOidcToken;
-    const scopes = Array.from(new Set([...(options.scopes ?? ["*"]), "offline_access"]));
+    const scopes = Array.from(new Set([...(options.scopes ?? ["openid"]), "offline_access"]));
     return {
         providerId: options.providerId,
         clientId: options.connector,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vercel/connect",
-  "version": "0.0.4-alpha.7",
+  "version": "0.0.4-alpha.8",
   "type": "module",
   "exports": {
     ".": {