Skip to content

feat: add more claims to OIDC token #94

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
enthusiastio wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

feat: add more claims to OIDC token #94

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 12 additions & 5 deletions src/models/Account.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ function toOpenIdConnectProfile(record) {
sub: record.oidc_sub,
name: record.firstname,
given_name: record.firstname,
gender: record.gender,
family_name: record.lastname,
email: record.email,
email_verified: record.email_verified,
Expand Down Expand Up @@ -40,16 +41,21 @@ class Account {
* loading some claims from external resources etc. based on this detail
* or not return them in id tokens but only userinfo and so on.
*/
async claims(use, scope) { // eslint-disable-line no-unused-vars
async claims(use, scope) {
// eslint-disable-line no-unused-vars
if (this.profile) {
return {
sub: this.accountId, // it is essential to always return a sub claim
name: this.profile.name,
given_name: this.profile.given_name,
family_name: this.profile.family_name,
email: this.profile.email,
email_verified: this.profile.email_verified,
family_name: this.profile.family_name,
given_name: this.profile.given_name,
gender: this.profile.gender,
birthdate: this.profile.birthdate,
phone_number: this.profile.phone_number,
address: this.profile.address,
locale: this.profile.locale,
name: this.profile.name,
};
}

Expand Down Expand Up @@ -106,7 +112,8 @@ class Account {
return new Account(user.oidc_sub, openidProfile);
}

static async findAccount(ctx, id, token) { // eslint-disable-line no-unused-vars
static async findAccount(ctx, id, token) {
// eslint-disable-line no-unused-vars
// token is a reference to the token used for which a given account is being loaded,
// it is undefined in scenarios where account claims are returned from authorization endpoint
// ctx is the koa request context
Expand Down