-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for the authorization "claims" parameter #11
Comments
We have support for hardcoded claims as well as other claims. Here is an example of how we configure those in config.add_scope OIDCProvider::Scopes::Profile do |account|
name "#{account.first_name} #{account.last_name}"
given_name account.first_name
family_name account.last_name
end
config.add_scope OIDCProvider::Scopes::Email do |account|
email account.email
email_verified false
end |
Is that what you're referring to, or something else? |
I am talking about the "claims" request parameter described in the OpenID documentation so that one can ask the OIDC provider to include this and that claim in the I am preparing a PR, I should submit it today. |
It took more time than expected but it is now ready for code review! :) |
@willtcarey PR conflicts are fixed. Do not hesitate if you have questions or comments on this feature implementation! |
Any chance you a get a look at this PR please @willtcarey? |
So far the supported claims is hardcoded in this gem's code limiting what consumer can do with the OIDC provider.
Implementing the "claims" parameter would allow one to configure the claims from the
id_token
and/or theuser_info
endpoint as per the OpenID documentation.The text was updated successfully, but these errors were encountered: