diff --git a/src/porchlight/oidc/endpoints.py b/src/porchlight/oidc/endpoints.py
index fe6e391..ee221ee 100644
--- a/src/porchlight/oidc/endpoints.py
+++ b/src/porchlight/oidc/endpoints.py
@@ -340,7 +340,7 @@ async def consent_submit(request: Request) -> Response:
         return HTMLResponse("<h1>Error</h1><p>Invalid action</p>", status_code=400)
 
     # Allow — collect approved scopes
-    approved_scopes = form.getlist("scope")
+    approved_scopes: list[str] = [str(s) for s in form.getlist("scope")]
     if "openid" not in approved_scopes:
         approved_scopes = ["openid", *list(approved_scopes)]