I don't know the purpose of your claim parameter but here's the kind of url generated by our oidc client:
https://xxx/cas/oidc/authorize?client_id=zzzz &redirect_uri=https%3A%2F%2Fyyy%2Fsilent-renew-oidc.html &response_type=id_token%20token &scope=openid%20profile%20email &state=vvvvvvv &nonce=wwwwwww &prompt=none Le vendredi 26 juin 2020 à 09:07:27 UTC+2, Jakub Fridrich a écrit : > Thanks, but attributes not showing still.. > > My service now looks like: > { > "@class" : "org.apereo.cas.services.OidcRegisteredService", > "clientId": "XXXX", > "clientSecret": "XXXXXX-XXXXX", > "serviceId": "^https://xwikl.XXXXXXX*";, > "name": "XXXX", > "id": 20, > > > "scopes" : [ "java.util.HashSet", > [ "openid", "profile", "email", "address" ] > ] > } > > > Requested url for Authorize endpoint (URL decoded): > https://auth.XXXXXX.XX/cas/oidc/authorize > ?scope=openid%20profile%20email%20address%20phone > > *&claims=* > *{"userinfo":{"sub":null,"iss":null,"openid":null,"profile":null,"name":null,"email":null,"first_name":null,"last_name":null}}* > > &response_type=code > &redirect_uri=https%3A%2F%2Fxwikl.xxxxx%2Fxxx%2Foidc%2Fauthenticator% > 2Fcallback > &client_id=XXXXXXX > > > In *userinfo* endpoint I getting now: > { > "email":"[email protected]", > "first_name":"Somename", > "last_name":"Somesuername", > "name":"somename.somesurname" > } > > I need in userinfo endpoint items as sub, iss, aud, etc... > > What am I doing wrong? > > Thanks > > > Dne čtvrtek 25. června 2020 16:02:30 UTC+2 Stéphane Delcourt napsal(a): >> >> you should remove the attributeReleasePolicy and replace it with >> >> "scopes" : [ "java.util.HashSet", >> [ "openid", "profile", "email", "address" ] >> ] >> >> >> Le jeu. 25 juin 2020 à 15:59, Jakub Fridrich <[email protected]> >> a écrit : >> > I tried adding to Release policy (to service), but sub is not showing >>> still. >>> "attributeReleasePolicy" : { >>> "@class" : >>> "org.apereo.cas.oidc.claims.OidcProfileScopeAttributeReleasePolicy", >>> "allowedAttributes" : [ "java.util.ArrayList", [ "sub", "first_name" >>> , "last_name", "email" ] ] >>> } >>> >>> >>> >>> Dne čtvrtek 25. června 2020 13:04:33 UTC+2 Jakub Fridrich napsal(a): >>>> >>>> info: CAS 6.2.0-RC5 builded from cas-overlay-template >>>> >>>> Problem: >>>> OpenID Connect in userinfo endpoint does not display required >>>> attributes (as iss, sub, aud, exp) if claims are set. >>>> >>>> Scopes requested by client: openid, profile, email, address, phone >>>> Claims requested by client: {"userinfo":{ "sub":null, "iss": null, >>>> "name": null, "email": null, "first_name": null, "last_name": null }} or >>>> {"userinfo":{"name": >>>> null, "email": null, "first_name": null, "last_name": null }} >>>> >>>> >>>> >>>> >>>> >>>> Service configuration: >>>> { >>>> "@class" : "org.apereo.cas.services.OidcRegisteredService", >>>> "clientId": "XXX", >>>> "clientSecret": "XXX", >>>> "serviceId": "^https://xwikl.xxxserver.*";, >>>> "name": "XTest", >>>> "id": 5, >>>> >>>> "attributeReleasePolicy" : { >>>> "@class" : "org.apereo.cas.services.ReturnAllAttributeReleasePolicy" >>>> } >>>> } >>>> >>>> >>>> Dears any sugestions how to get in userinfo endpoint required fields >>>> (iss, sub, aud, exp) ? >>>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> >> To unsubscribe from this group and stop receiving emails from it, send an >>> email to [email protected]. >> >> >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/4690ebe5-3250-4798-bd0c-9e0925526ebco%40apereo.org >>> >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/4690ebe5-3250-4798-bd0c-9e0925526ebco%40apereo.org?utm_medium=email&utm_source=footer> >>> . >>> >> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/a911b8da-bd18-4143-8f0a-e5a1d79cd0fen%40apereo.org.
