diff --git a/crates/tranquil-oauth-server/src/endpoints/authorize/consent.rs b/crates/tranquil-oauth-server/src/endpoints/authorize/consent.rs index df8508a..fcef639 100644 --- a/crates/tranquil-oauth-server/src/endpoints/authorize/consent.rs +++ b/crates/tranquil-oauth-server/src/endpoints/authorize/consent.rs @@ -344,6 +344,9 @@ pub async fn consent_get( (None, None, None, None) }; + let transition_supersedes = + scopes.iter().any(|s| s.superseded) || permission_sets.iter().any(|s| s.superseded); + Json(ConsentResponse { request_uri: query.request_uri.clone(), client_id: request_data.parameters.client_id.clone(), @@ -352,7 +355,7 @@ pub async fn consent_get( logo_uri: client_metadata.as_ref().and_then(|m| m.logo_uri.clone()), scopes, permission_sets, - transition_supersedes: has_transition_generic && has_granular_scopes, + transition_supersedes, failed_sets, show_consent, did: did.clone(), diff --git a/frontend/src/routes/OAuthConsent.svelte b/frontend/src/routes/OAuthConsent.svelte index 0a225fd..d7feec1 100644 --- a/frontend/src/routes/OAuthConsent.svelte +++ b/frontend/src/routes/OAuthConsent.svelte @@ -562,7 +562,7 @@ handleScopeToggle(set.include_scope)} />