仅在 UserInfoEndpoint 中获取 sub [英] Getting only sub in UserInfoEndpoint

问题描述

我只是按照

更新:

• 这是一个开放的错误.什么是获得其他领域的解决方法吗?基于那个jira，只有密码授予未修复，在哪里获取代码修复和隐性拨款?

• 我也尝试在本地托管 IS，结果相同

解决方案

要将 OIDC 声明属性检索到 id_token 或 userinfo 端点，需要正确完成以下步骤(假设您使用的是 IS 5.2.0).
1. 使用底层用户存储的匹配属性更新相关声明的映射属性.
2. 更新请求的服务提供商声明[1].
3. 为范围openid"更新/_system/config/oidc"中缺少的属性(IS 5.2.0 中的配置更改 [2]).

I am just following what is on the guide

I've already populated the user's profile information but so far I only get sub. I want to get something same like in the guide:

{ 
   "sub":"admin",
   "email":"[e-mail]",
   "website":"https://wso2.com",
   "name":"admin",
   "family_name":"admin",
   "preferred_username":"admin",
   "given_name":"admin",
   "profile":"https://wso2.com",
   "country":"Sri Lanka"
}

CONFIG

Identity Server - AWS Cloud with Domain and SSL + Nginx Proxy

Sample Web App - local machine

UPDATE:

• It is an open bug. What is the workaround to get the other fields? Based on that jira, only the password grant is not fix, where to get the fix for code and impilict grant?

• I tried hosting the IS also locally, same results

解决方案

To retrieve OIDC claim attributes to id_token or userinfo endpoint, the following steps needs to be done correctly(assuming you are working on IS 5.2.0).
1. Update relevant claims' Mapped Attribute with your underlying user store's matching attributes.
2. Update requested claims to Service provider [1].
3. Update missing attributes in '/_system/config/oidc' for scope 'openid' (Configuration changes in IS 5.2.0 [2]).

这篇关于仅在 UserInfoEndpoint 中获取 sub的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！