Skip to content

[BUG] auto-provisioned OIDC users incorrectly created #1074

@andrewmeyer

Description

@andrewmeyer

Describe the bug
When users are automatically created on first login, the OIDC handler is not properly mapping the claims, leading to incorrect Names and Email addresses

To Reproduce
Steps to reproduce the behavior:

  1. log in as a new user via OIDC and have Iris auto-create your profile
  2. click on "My Settings"
  3. observe the name, and email fields

name is set to the email address and email is set to the users login address
these settings also contradict OIDC_MAPPER_USERNAME and OIDC_MAPPER_EMAIL

Expected behavior
A user is created such that the name, username, and email fields all match the specified claims

Note:
currently there is no "name" field, but the listed PR below appears to add it as well. In our environment we provide names via a claim, which we would configure here as well.

Screenshots
Image

Desktop (please complete the following information):

  • OS: Docker Image
  • Browser Firefox
  • Version Iris 2.4.29

Additional context
I think this is addressed already in
#652
https://github.com/dfir-iris/iris-web/pull/652/changes#diff-ce09f8726cf84921be0432cf99bf813a9eb54b41dab45a9c89b14031615a807cL243

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions