feat: add notifications scope to GitHub OAuth defaultScope

Add the 'notifications' scope to the GitHub identity provider's defaultScope in the Keycloak realm configuration. This enables agents to read and manage GitHub notifications via the API (list notifications, mark as read/done). Co-authored-by: openhands <openhands@all-hands.dev>
2026-04-29 03:00:45 -04:00 · 2026-04-10 23:34:45 +00:00
1 changed files with 1 additions and 1 deletions
--- a/enterprise/allhands-realm-github-provider.json.tmpl
+++ b/enterprise/allhands-realm-github-provider.json.tmpl
@@ -1729,7 +1729,7 @@
        "syncMode": "IMPORT",
        "clientSecret": "$GITHUB_APP_CLIENT_SECRET",
        "caseSensitiveOriginalUsername": "false",
-        "defaultScope": "openid email profile",
+        "defaultScope": "openid email profile notifications",
        "baseUrl": "$GITHUB_BASE_URL"
      }
    },