Fix generic OIDC: return the correct user_id field (#1021)

uc-cdis · Apr 19, 2022 · dfdde51 · dfdde51
1 parent 7d19c85
commit dfdde51
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/fence/resources/openid/idp_oauth2.py b/fence/resources/openid/idp_oauth2.py
@@ -168,8 +168,11 @@ def get_user_id(self, code):
             if claims.get(user_id_field):
                 if user_id_field == "email" and not claims.get("email_verified"):
                     return {"error": "Email is not verified"}
-                return {"sub": claims[user_id_field]}
+                return {user_id_field: claims[user_id_field]}
             else:
+                self.logger.exception(
+                    f"Can't get {user_id_field} from claims: {claims}"
+                )
                 return {"error": f"Can't get {user_id_field} from claims"}
 
         except Exception as e: