Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support "claims" OpenID Connect auth request parameter #20

Closed
iainmcgin opened this issue Mar 7, 2016 · 3 comments
Closed

Support "claims" OpenID Connect auth request parameter #20

iainmcgin opened this issue Mar 7, 2016 · 3 comments
Milestone

Comments

@iainmcgin
Copy link
Member

OpenID Connect Core 1.0, Section 5.5, claims parameter:

OPTIONAL. This parameter is used to request that specific Claims be returned. The value is a JSON object listing the requested Claims.

An example Claims request is as follows:

{
  "userinfo":
  {
      "given_name": {"essential": true},
      "nickname": null,
      "email": {"essential": true},
      "email_verified": {"essential": true},
      "picture": null,
      "http://example.info/claims/groups": null
  },
  "id_token":
  {
      "auth_time": {"essential": true},
      "acr": {"values": ["urn:mace:incommon:iap:silver"] }
  }
}
@iainmcgin iainmcgin modified the milestone: Backlog Mar 10, 2016
@Abdelsattar
Copy link

any WIP for this enhancement and how we can currently send claims?

@agologan
Copy link
Collaborator

@Abdelsattar added support for passing in claims and claims_locales in v0.10.0.
Since claims is a structured object you'll have to create and pass in a JSONObject to make use of it.

You can also use additionalParameters to pass in parameters which are not yet supported by the lib.
Let me know if you run into any issues.

@Abdelsattar
Copy link

Thanks, @agologan for the updates, yes Currently I'm using additionalParameters to send it and will use claim when refactor

fantostisch added a commit to fantostisch/AppAuth-Android that referenced this issue Aug 23, 2021
AppAuth 0.10.0 release
- Add ID token azp (authorized party) validation (openid#727)
- Support requesting specific claims and claims languages (openid#20)
- Deserialize objects using the constructor instead of the builder - fixes (openid#726)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants