a

module.nix

@@ -117,7 +117,7 @@ in
           auth_endpoint = "/ui/oauth2";
           client_secret = "@replace_oauth_secret@";
           map_user_id = "preferred_username";
-          scope = "openid,email,profile";
+          scope = "openid, email, profile";
         };
       };
     };
@@ -164,9 +164,9 @@ in
       originUrl = "https://${cfg.subdomain}.${sp.domain}/oauth/callback/generic";
       clientSystemdUnits = [ "writefreely.service" ];
       enablePkce = false;
-      # scopeMaps = {
-      #   "${usersGroup}" = [ "email" "openid" "profile" "read_user" ];
-      # };
+      scopeMaps = {
+        "${usersGroup}" = [ "email" "openid" "profile" "read_user" ];
+      };
       linuxUserOfClient = "writefreely";
       linuxGroupOfClient = "writefreely";
     };