The require_oidc_scope function in auth.py always checks g.oidc_scopes, which is not set with either krb or noauth backends, which I think might cause issues. Maybe the require_oidc_scope function should make sure to not check that if auth != 'openidc'?
Fixed in https://pagure.io/odcs/pull-request/94
Metadata Update from @cqi: - Issue status updated to: Closed (was: Open)
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/pungi/odcs/issues/87
Please continue any further discussion there.