I think you have to list the scopes available in the service definition
like described here:
https://apereo.github.io/cas/development/installation/OIDC-Authentication.html#scope-based-claims
Le jeudi 25 juin 2020 à 13:04:33 UTC+2, Jakub Fridrich a écrit :
> info: CAS 6.2.0-RC5 builded from cas-overlay-template
>
> Problem:
> OpenID Connect in userinfo endpoint does not display required
> attributes (as iss, sub, aud, exp) if claims are set.
>
> Scopes requested by client: openid, profile, email, address, phone
> Claims requested by client: {"userinfo":{ "sub":null, "iss": null,
> "name": null, "email": null, "first_name": null, "last_name": null }} or
> {"userinfo":{"name":
> null, "email": null, "first_name": null, "last_name": null }}
>
>
>
>
>
> Service configuration:
> {
> "@class" : "org.apereo.cas.services.OidcRegisteredService",
> "clientId": "XXX",
> "clientSecret": "XXX",
> "serviceId": "^https://xwikl.xxxserver.*",
> "name": "XTest",
> "id": 5,
>
> "attributeReleasePolicy" : {
> "@class" : "org.apereo.cas.services.ReturnAllAttributeReleasePolicy"
> }
> }
>
>
> Dears any sugestions how to get in userinfo endpoint required fields (iss,
> sub, aud, exp) ?
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/735b40dc-ebfa-4ad2-89ba-65154e566b63n%40apereo.org.