From 04ae811affbeb3387e58a146efc76da8495a527a Mon Sep 17 00:00:00 2001 From: Bryan Helmkamp Date: Tue, 10 Mar 2026 18:07:33 -0400 Subject: [PATCH] Add api.responses.write scope to OpenAI OAuth flow The browser login flow only requested identity scopes, so the resulting access token lacked permission to call the Responses API. Co-Authored-By: Claude Opus 4.6 (1M context) --- lib/crates/arc-openai-oauth/src/lib.rs | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/lib/crates/arc-openai-oauth/src/lib.rs b/lib/crates/arc-openai-oauth/src/lib.rs index fd7de5bb9..db4155cf8 100644 --- a/lib/crates/arc-openai-oauth/src/lib.rs +++ b/lib/crates/arc-openai-oauth/src/lib.rs @@ -77,7 +77,10 @@ pub fn build_authorize_url( ("response_type", "code"), ("client_id", client_id), ("redirect_uri", redirect_uri), - ("scope", "openid profile email offline_access"), + ( + "scope", + "openid profile email offline_access api.responses.write", + ), ("code_challenge", &pkce.challenge), ("code_challenge_method", "S256"), ("state", state),