Skip to content
This repository has been archived by the owner on Jan 24, 2019. It is now read-only.

oidc provider should read email from userInfo #615

Open
Kaszaq opened this issue Jun 7, 2018 · 0 comments
Open

oidc provider should read email from userInfo #615

Kaszaq opened this issue Jun 7, 2018 · 0 comments

Comments

@Kaszaq
Copy link

Kaszaq commented Jun 7, 2018

Hello,

The oidc specifications says that when authorization code is used and access token is returned email is returned from UserInfo endpoint and id_token has email when no access token was issued.

The Claims requested by the profile, email, address, and phone scope values are returned from the UserInfo Endpoint, as described in Section 5.3.2, when a response_type value is used that results in an Access Token being issued. However, when no Access Token is issued (which is the case for the response_type value id_token), the resulting Claims are returned in the ID Token.

Can you please extend oidc provider implementation to use userinfo endpoint?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

1 participant