From 9d83a1e6cce02e7983a6bda00fbf76988b455cbc Mon Sep 17 00:00:00 2001
From: Dusan Zelembaba <dusanz08@gmail.com>
Date: Fri, 5 Apr 2019 10:13:14 -0400
Subject: [PATCH] Restrict Scope for Cloud Healthcare API Example Config (#378)

The integration only needs read access to projects not all cloud
platform resources.
---
 config/oidc.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/config/oidc.json b/config/oidc.json
index 53ad5b5da..cf0c42f5e 100644
--- a/config/oidc.json
+++ b/config/oidc.json
@@ -26,11 +26,11 @@
         "authServerUrl": "https://accounts.google.com",
         "authRedirectUri": "/_oauth/google",
         "postLogoutRedirectUri": "/",
-        "scope": "email profile openid  https://www.googleapis.com/auth/cloud-platform.read-only https://www.googleapis.com/auth/cloud-healthcare",
+        "scope": "email profile openid  https://www.googleapis.com/auth/cloudplatformprojects.readonly https://www.googleapis.com/auth/cloud-healthcare",
         "revokeUrl": "https://accounts.google.com/o/oauth2/revoke?token="
       }]
     },
     "userAuthenticationRoutesEnabled": true,
     "demoMode": false
   }
-}
\ No newline at end of file
+}