endusers shouldn't be able to manage applications - scope removed

auth0-extensions · May 11, 2018 · 67447e8 · 67447e8
1 parent 33efebd
commit 67447e8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/client/actions/auth.js b/client/actions/auth.js
@@ -8,7 +8,7 @@ const webAuth = new auth0.WebAuth({ // eslint-disable-line no-undef
   domain: window.config.AUTH0_DOMAIN,
   clientID: window.config.AUTH0_CLIENT_ID,
   responseType: 'id_token token',
-  scope: 'openid name email nickname read:applications manage:applications',
+  scope: 'openid name email nickname read:applications',
   audience: 'urn:auth0-sso-dashboard'
 });