Bugfix (#4)

Author: dartheian

README.md

@@ -21,6 +21,7 @@ Authentication and the Identity tokens are included in the responses.
 
 - The errors are unstructured human-readable strings, useful for debugging
   purposes
+- Use of a custom `groups` scope
 
 ## Okta implementation
 
@@ -43,6 +44,6 @@ $ ./script/token.sh <code value from previous response>
 ## TODO
 
 - Dockerfile
-- Doument httpie usage in scripts
+- Document httpie usage in scripts
 - Implement error responses as per RFCs
 - Logs

src/authorize/extractor.rs

@@ -70,7 +70,7 @@ fn response_type<'de, D: Deserializer<'de>>(d: D) -> Result<ResponseType, D::Err
 fn scope<'de, D: Deserializer<'de>>(d: D) -> Result<HashSet<Scope>, D::Error> {
     StringWithSeparator::<SpaceSeparator, Scope>::deserialize_as(d)
         .and_then(|s| validate_scope(s).map_err(serde::de::Error::custom))
-        .map_err(|e| format!("error while parsing field `state`: {e}"))
+        .map_err(|e| format!("error while parsing field `scope`: {e}"))
         .map_err(serde::de::Error::custom)
 }
 

src/parameter/mod.rs

@@ -44,6 +44,7 @@ pub enum TokenType {
 pub enum Scope {
     Address,
     Email,
+    Groups,
     Openid,
     Phone,
     Profile,