Add user id to TOKEN_EXCHANGE events

Co-authored-by: thaDude <ogdude@googlemail.com>
keycloak · Feb 22, 2023 · 82423f3 · 82423f3
1 parent 2b98fcd
commit 82423f3
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/services/src/main/java/org/keycloak/protocol/oidc/DefaultTokenExchangeProvider.java b/services/src/main/java/org/keycloak/protocol/oidc/DefaultTokenExchangeProvider.java
@@ -411,7 +411,8 @@ protected Response exchangeClientToOIDCClient(UserModel targetUser, UserSessionM
         }
 
         AccessTokenResponse res = responseBuilder.build();
-        event.detail(Details.AUDIENCE, targetClient.getClientId());
+        event.detail(Details.AUDIENCE, targetClient.getClientId())
+            .user(targetUser);
 
         event.success();
 
@@ -460,7 +461,9 @@ protected Response exchangeClientToSAML2Client(UserModel targetUser, UserSession
         res.setExpiresIn(assertionLifespan <= 0 ? realm.getAccessCodeLifespan() : assertionLifespan);
         res.setOtherClaims(OAuth2Constants.ISSUED_TOKEN_TYPE, requestedTokenType);
 
-        event.detail(Details.AUDIENCE, targetClient.getClientId());
+        event.detail(Details.AUDIENCE, targetClient.getClientId())
+            .user(targetUser);
+
         event.success();
 
         return cors.builder(Response.ok(res, MediaType.APPLICATION_JSON_TYPE)).build();