fix: do not hardcode scopes for azure AD v2

django_auth_adfs/__init__.py

@@ -4,4 +4,4 @@
 Adding imports here will break setup.py
 """
 
-__version__ = '1.11.4'
+__version__ = '1.11.5'

django_auth_adfs/config.py

@@ -346,7 +346,10 @@ def build_authorization_endpoint(self, request, disable_sso=None, force_mfa=Fals
         })
         if self._mode == "openid_connect":
             if settings.VERSION == 'v2.0':
-                query["scope"] = f"openid api://{settings.RELYING_PARTY_ID}/.default"
+                if settings.RELYING_PARTY_ID == settings.CLIENT_ID:
+                    query["scope"] = f"openid api://{settings.RELYING_PARTY_ID}/.default"
+                else:
+                    query["scope"] = f"openid {settings.RELYING_PARTY_ID}"
                 query.pop("resource")
             else:
                 query["scope"] = "openid"

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = 'django-auth-adfs'
-version = "1.11.4"  # Remember to also change __init__.py version
+version = "1.11.5"  # Remember to also change __init__.py version
 description = 'A Django authentication backend for Microsoft ADFS and AzureAD'
 authors = ['Joris Beckers <[email protected]>']
 maintainers = ['Jonas Krüger Svensson <[email protected]>', 'Sondre Lillebø Gundersen <[email protected]>']