Yes, for userinfo endpoint I think */cas/oidc/profile*.
For claims, I need this params, generated with XWiki. The above claim it I
testing.
*&claims=*{"id_token":{"xwiki_instance_id":null},"userinfo":{
"xwiki_user_accessibility":null,"xwiki_user_displayHiddenDocuments":null,
"xwiki_user_editor":null,"xwiki_user_usertype":null,"xwiki_user_company":
null}}
Dne pátek 26. června 2020 15:08:28 UTC+2 ste napsal(a):
>
> Ok all look good.
> So what is that :
> *&claims=*
> *{"userinfo":{"sub":null,"iss":null,"openid":null,"profile":null,"name":null,"email":null,"first_name":null,"last_name":null}}*
> you don't need it in /cas/oidc/authorize
>
> And when you talk about "In *userinfo* endpoint I getting now" what is
> your user info endpoint ? /cas/iodc/profile ?
>
>
> Le ven. 26 juin 2020 à 14:33, Jakub Fridrich <[email protected]
> <javascript:>> a écrit :
>
>> Hi,
>> .well-known return this JSON (in attachment)
>>
>>
>>
>>
>> Dne pátek 26. června 2020 13:50:17 UTC+2 ste napsal(a):
>>>
>>> Hi, You see it here : /cas/oidc/.well-known ?
>>>
>>> Le ven. 26 juin 2020 à 09:07, Jakub Fridrich <[email protected]>
>>> a écrit :
>>>
>>>> Thanks, but attributes not showing still..
>>>>
>>>> My service now looks like:
>>>> {
>>>> "@class" : "org.apereo.cas.services.OidcRegisteredService",
>>>> "clientId": "XXXX",
>>>> "clientSecret": "XXXXXX-XXXXX",
>>>> "serviceId": "^https://xwikl.XXXXXXX*";,
>>>> "name": "XXXX",
>>>> "id": 20,
>>>>
>>>> "scopes" : [ "java.util.HashSet",
>>>> [ "openid", "profile", "email", "address" ]
>>>> ]
>>>> }
>>>>
>>>>
>>>> Requested url for Authorize endpoint (URL decoded):
>>>> https://auth.XXXXXX.XX/cas/oidc/authorize
>>>> ?scope=openid%20profile%20email%20address%20phone
>>>>
>>>> *&claims=*
>>>> *{"userinfo":{"sub":null,"iss":null,"openid":null,"profile":null,"name":null,"email":null,"first_name":null,"last_name":null}}*
>>>>
>>>> &response_type=code
>>>> &redirect_uri=https%3A%2F%2Fxwikl.xxxxx%2Fxxx%2Foidc%2Fauthenticator%
>>>> 2Fcallback
>>>> &client_id=XXXXXXX
>>>>
>>>>
>>>> In *userinfo* endpoint I getting now:
>>>> {
>>>> "email":"[email protected]",
>>>> "first_name":"Somename",
>>>> "last_name":"Somesuername",
>>>> "name":"somename.somesurname"
>>>> }
>>>>
>>>> I need in userinfo endpoint items as sub, iss, aud, etc...
>>>>
>>>> What am I doing wrong?
>>>>
>>>> Thanks
>>>>
>>>>
>>>> Dne čtvrtek 25. června 2020 16:02:30 UTC+2 Stéphane Delcourt napsal(a):
>>>>>
>>>>> you should remove the attributeReleasePolicy and replace it with
>>>>>
>>>>> "scopes" : [ "java.util.HashSet",
>>>>> [ "openid", "profile", "email", "address" ]
>>>>> ]
>>>>>
>>>>>
>>>>> Le jeu. 25 juin 2020 à 15:59, Jakub Fridrich <
>>>>> [email protected]> a écrit :
>>>>>
>>>>>> I tried adding to Release policy (to service), but sub is not showing
>>>>>> still.
>>>>>> "attributeReleasePolicy" : {
>>>>>> "@class" :
>>>>>> "org.apereo.cas.oidc.claims.OidcProfileScopeAttributeReleasePolicy",
>>>>>> "allowedAttributes" : [ "java.util.ArrayList", [ "sub",
>>>>>> "first_name", "last_name", "email" ] ]
>>>>>> }
>>>>>>
>>>>>>
>>>>>>
>>>>>> Dne čtvrtek 25. června 2020 13:04:33 UTC+2 Jakub Fridrich napsal(a):
>>>>>>>
>>>>>>> info: CAS 6.2.0-RC5 builded from cas-overlay-template
>>>>>>>
>>>>>>> Problem:
>>>>>>> OpenID Connect in userinfo endpoint does not display required
>>>>>>> attributes (as iss, sub, aud, exp) if claims are set.
>>>>>>>
>>>>>>> Scopes requested by client: openid, profile, email, address, phone
>>>>>>> Claims requested by client: {"userinfo":{ "sub":null, "iss": null,
>>>>>>> "name": null, "email": null, "first_name": null, "last_name": null }}
>>>>>>> or {"userinfo":{"name":
>>>>>>> null, "email": null, "first_name": null, "last_name": null }}
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Service configuration:
>>>>>>> {
>>>>>>> "@class" : "org.apereo.cas.services.OidcRegisteredService",
>>>>>>> "clientId": "XXX",
>>>>>>> "clientSecret": "XXX",
>>>>>>> "serviceId": "^https://xwikl.xxxserver.*";,
>>>>>>> "name": "XTest",
>>>>>>> "id": 5,
>>>>>>>
>>>>>>> "attributeReleasePolicy" : {
>>>>>>> "@class" :
>>>>>>> "org.apereo.cas.services.ReturnAllAttributeReleasePolicy"
>>>>>>> }
>>>>>>> }
>>>>>>>
>>>>>>>
>>>>>>> Dears any sugestions how to get in userinfo endpoint required fields
>>>>>>> (iss, sub, aud, exp) ?
>>>>>>>
>>>>>> --
>>>>>> - Website: https://apereo.github.io/cas
>>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>>>> - Contributions: https://goo.gl/mh7qDG
>>>>>> ---
>>>>>> You received this message because you are subscribed to the Google
>>>>>> Groups "CAS Community" group.
>>>>>> To unsubscribe from this group and stop receiving emails from it,
>>>>>> send an email to [email protected].
>>>>>> To view this discussion on the web visit
>>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/4690ebe5-3250-4798-bd0c-9e0925526ebco%40apereo.org
>>>>>>
>>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/4690ebe5-3250-4798-bd0c-9e0925526ebco%40apereo.org?utm_medium=email&utm_source=footer>
>>>>>> .
>>>>>>
>>>>> --
>>>> - Website: https://apereo.github.io/cas
>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>> - Contributions: https://goo.gl/mh7qDG
>>>> ---
>>>> You received this message because you are subscribed to the Google
>>>> Groups "CAS Community" group.
>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>> an email to [email protected].
>>>> To view this discussion on the web visit
>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/ffcc34a1-0bee-48fc-b142-3c2376e0536bo%40apereo.org
>>>>
>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/ffcc34a1-0bee-48fc-b142-3c2376e0536bo%40apereo.org?utm_medium=email&utm_source=footer>
>>>> .
>>>>
>>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected] <javascript:>.
>> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/df485fde-42c6-4937-b7cb-fc734039c09co%40apereo.org
>>
>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/df485fde-42c6-4937-b7cb-fc734039c09co%40apereo.org?utm_medium=email&utm_source=footer>
>> .
>>
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/a0ef055b-2369-46df-be5c-b14970589576o%40apereo.org.
