Add note about scope/access_token issue

README.md

@@ -17,13 +17,15 @@ Gem to authenticate applications to the Office365 v2.0 REST API via OAuth2.
 * Developer Console: https://apps.dev.microsoft.com/
 * Available Scopes: https://msdn.microsoft.com/office/office365/howto/authenticate-office-365-apis-using-v2#bk_Outlookscopes.
 
+**Note** Depending on the which scopes you choose, a successful response may not contain an access_token. In that cases, an error will be raised in the `oauth2` gem. There's a PR that should address this: https://github.com/intridea/oauth2/pull/243.
+
 ## Standard setup:
 
 ```ruby
   # Add to your initializers/omniauth.rb
 
   use OmniAuth::Builder do
-    provider :office365, ENV['OFFICE365_APP_ID'], ENV['OFFICE365_APP_SECRET'], :scope => "profile"
+    provider :office365, ENV['OFFICE365_APP_ID'], ENV['OFFICE365_APP_SECRET'], :scope => 'https://outlook.office.com/mail.read'
   end
 ```
 
@@ -32,5 +34,5 @@ Gem to authenticate applications to the Office365 v2.0 REST API via OAuth2.
 ```ruby
   # Add to your devise.rb
 
-  config.omniauth :office365, ENV['OFFICE365_APP_ID'], ENV['OFFICE365_APP_SECRET'], :scope => "profile"
+  config.omniauth :office365, ENV['OFFICE365_APP_ID'], ENV['OFFICE365_APP_SECRET'], :scope => 'https://outlook.office.com/mail.read'
 ```

example/config.ru

@@ -5,7 +5,7 @@ require './app.rb'
 use Rack::Session::Cookie, :secret => 'abc123'
 
 use OmniAuth::Builder do
-  provider :office365, ENV['OFFICE365_APP_ID'], ENV['OFFICE365_APP_SECRET'], :scope => 'all:manage'
+  provider :office365, ENV['OFFICE365_APP_ID'], ENV['OFFICE365_APP_SECRET'], :scope => 'https://outlook.office.com/mail.read'
 end
 
 run Sinatra::Application