Open
Description
DB uses https://www.googleapis.com/auth/userinfo.email
, https://www.googleapis.com/auth/userinfo.profile
and openid
. Swagger UI only uses only https://www.googleapis.com/auth/userinfo.email
.
I've been getting mixed messages from Broad folks which scopes are actually necessary.
The three used by the DB seem fairly standard and don't require app validation by Google so why not use them for the Swagger UI, too.
Solve together with #4338.