From 4de38772cddfe321be89cab79f8eea48d9b72d2f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jos=C3=A9=20Manuel=20Dom=C3=ADnguez?=
 <43052541+kysrpex@users.noreply.github.com>
Date: Thu, 31 Oct 2024 15:05:42 +0100
Subject: [PATCH] Enable `offline_access` scope for Elixir OIDC provider

This scope is required to obtain refresh tokens from Elixir (LSAAI). Additionally, the `offline_access` scope in the service registration must be allowed registration on LSAAI's side (https://services.aai.lifescience-ri.eu/spreg/auth/facilities/detail/3686).
---
 templates/galaxy/config/oidc_backends_config.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/galaxy/config/oidc_backends_config.xml b/templates/galaxy/config/oidc_backends_config.xml
index e310f3d60..46e914277 100644
--- a/templates/galaxy/config/oidc_backends_config.xml
+++ b/templates/galaxy/config/oidc_backends_config.xml
@@ -63,7 +63,7 @@ Please mind `http` and `https`.
         <prompt>consent</prompt>
         <icon>https://lifescience-ri.eu/fileadmin/lifescience-ri/media/Images/button-login-small.png</icon>
         <!-- (Optional) Extra scopes you need to request for your implementation -->
-        <!-- <extra_scopes>offline_access,something-else</extra_scopes> -->
+        <extra_scopes>offline_access</extra_scopes>
 
     </provider>
     <provider name="Keycloak">