fix redirect + respect scope

auth.py

@@ -10,7 +10,6 @@ from starlette.middleware.sessions import SessionMiddleware
 OAUTH_CLIENT_ID = os.environ.get("OAUTH_CLIENT_ID")
 OAUTH_CLIENT_SECRET = os.environ.get("OAUTH_CLIENT_SECRET")
 OAUTH_SCOPES = os.environ.get("OAUTH_SCOPES")
-OAUTH_SCOPES = "profile" # TODO: remove when openid is fixed (honor nonce)
 OPENID_PROVIDER_URL =  os.environ.get("OPENID_PROVIDER_URL")
 
 for value in (OAUTH_CLIENT_ID, OAUTH_CLIENT_SECRET, OAUTH_SCOPES, OPENID_PROVIDER_URL):
@@ -42,13 +41,8 @@ async def oauth_logout(request: Request):
 
 async def oauth_redirect_callback(request: Request):
     token = await oauth.huggingface.authorize_access_token(request)
-
-    async with httpx.AsyncClient() as client:
-        resp = await client.get(USER_INFO_URL, headers={"Authorization": f"Bearer {token['access_token']}"})
-        user_info = resp.json()
-
-    request.session["user"] = user_info  # TODO: we should store token instead
-    return RedirectResponse(request.url_for("landing"))
+    request.session["user"] = token["userinfo"]  # TODO: we should store entire token
+    return RedirectResponse("/")
 
 
 def attach_oauth(app: FastAPI) -> None: