Ok maybe you need it in response, but not when you request Authorization.
Le ven. 26 juin 2020 à 15:20, Jakub Fridrich <
[email protected]> a écrit :
> Yes, for userinfo endpoint I think */cas/oidc/profile*.
>
> For claims, I need this params, generated with XWiki. The above claim it I
> testing.
> *&claims=*{"id_token":{"xwiki_instance_id":null},"userinfo":{
> "xwiki_user_accessibility":null,"xwiki_user_displayHiddenDocuments":null,
> "xwiki_user_editor":null,"xwiki_user_usertype":null,"xwiki_user_company":
> null}}
>
>
>
> Dne pátek 26. června 2020 15:08:28 UTC+2 ste napsal(a):
>>
>> Ok all look good.
>> So what is that :
>> *&claims=*
>> *{"userinfo":{"sub":null,"iss":null,"openid":null,"profile":null,"name":null,"email":null,"first_name":null,"last_name":null}}*
>> you don't need it in /cas/oidc/authorize
>>
>> And when you talk about "In *userinfo* endpoint I getting now" what is
>> your user info endpoint ? /cas/iodc/profile ?
>>
>>
>> Le ven. 26 juin 2020 à 14:33, Jakub Fridrich <[email protected]>
>> a écrit :
>>
>>> Hi,
>>> .well-known return this JSON (in attachment)
>>>
>>>
>>>
>>>
>>> Dne pátek 26. června 2020 13:50:17 UTC+2 ste napsal(a):
>>>>
>>>> Hi, You see it here : /cas/oidc/.well-known ?
>>>>
>>>> Le ven. 26 juin 2020 à 09:07, Jakub Fridrich <
>>>> [email protected]> a écrit :
>>>>
>>>>> Thanks, but attributes not showing still..
>>>>>
>>>>> My service now looks like:
>>>>> {
>>>>> "@class" : "org.apereo.cas.services.OidcRegisteredService",
>>>>> "clientId": "XXXX",
>>>>> "clientSecret": "XXXXXX-XXXXX",
>>>>> "serviceId": "^https://xwikl.XXXXXXX*";,
>>>>> "name": "XXXX",
>>>>> "id": 20,
>>>>>
>>>>> "scopes" : [ "java.util.HashSet",
>>>>> [ "openid", "profile", "email", "address" ]
>>>>> ]
>>>>> }
>>>>>
>>>>>
>>>>> Requested url for Authorize endpoint (URL decoded):
>>>>> https://auth.XXXXXX.XX/cas/oidc/authorize
>>>>> ?scope=openid%20profile%20email%20address%20phone
>>>>>
>>>>> *&claims=*
>>>>> *{"userinfo":{"sub":null,"iss":null,"openid":null,"profile":null,"name":null,"email":null,"first_name":null,"last_name":null}}*
>>>>>
>>>>> &response_type=code
>>>>> &redirect_uri=https%3A%2F%2Fxwikl.xxxxx%2Fxxx%2Foidc%2Fauthenticator%
>>>>> 2Fcallback
>>>>> &client_id=XXXXXXX
>>>>>
>>>>>
>>>>> In *userinfo* endpoint I getting now:
>>>>> {
>>>>> "email":"[email protected]",
>>>>> "first_name":"Somename",
>>>>> "last_name":"Somesuername",
>>>>> "name":"somename.somesurname"
>>>>> }
>>>>>
>>>>> I need in userinfo endpoint items as sub, iss, aud, etc...
>>>>>
>>>>> What am I doing wrong?
>>>>>
>>>>> Thanks
>>>>>
>>>>>
>>>>> Dne čtvrtek 25. června 2020 16:02:30 UTC+2 Stéphane Delcourt napsal(a):
>>>>>>
>>>>>> you should remove the attributeReleasePolicy and replace it with
>>>>>>
>>>>>> "scopes" : [ "java.util.HashSet",
>>>>>> [ "openid", "profile", "email", "address" ]
>>>>>> ]
>>>>>>
>>>>>>
>>>>>> Le jeu. 25 juin 2020 à 15:59, Jakub Fridrich <
>>>>>> [email protected]> a écrit :
>>>>>>
>>>>>>> I tried adding to Release policy (to service), but sub is not
>>>>>>> showing still.
>>>>>>> "attributeReleasePolicy" : {
>>>>>>> "@class" :
>>>>>>> "org.apereo.cas.oidc.claims.OidcProfileScopeAttributeReleasePolicy",
>>>>>>> "allowedAttributes" : [ "java.util.ArrayList", [ "sub",
>>>>>>> "first_name", "last_name", "email" ] ]
>>>>>>> }
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Dne čtvrtek 25. června 2020 13:04:33 UTC+2 Jakub Fridrich napsal(a):
>>>>>>>>
>>>>>>>> info: CAS 6.2.0-RC5 builded from cas-overlay-template
>>>>>>>>
>>>>>>>> Problem:
>>>>>>>> OpenID Connect in userinfo endpoint does not display required
>>>>>>>> attributes (as iss, sub, aud, exp) if claims are set.
>>>>>>>>
>>>>>>>> Scopes requested by client: openid, profile, email, address, phone
>>>>>>>> Claims requested by client: {"userinfo":{ "sub":null, "iss": null,
>>>>>>>> "name": null, "email": null, "first_name": null, "last_name": null }}
>>>>>>>> or {"userinfo":{"name":
>>>>>>>> null, "email": null, "first_name": null, "last_name": null }}
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Service configuration:
>>>>>>>> {
>>>>>>>> "@class" : "org.apereo.cas.services.OidcRegisteredService",
>>>>>>>> "clientId": "XXX",
>>>>>>>> "clientSecret": "XXX",
>>>>>>>> "serviceId": "^https://xwikl.xxxserver.*";,
>>>>>>>> "name": "XTest",
>>>>>>>> "id": 5,
>>>>>>>>
>>>>>>>> "attributeReleasePolicy" : {
>>>>>>>> "@class" :
>>>>>>>> "org.apereo.cas.services.ReturnAllAttributeReleasePolicy"
>>>>>>>> }
>>>>>>>> }
>>>>>>>>
>>>>>>>>
>>>>>>>> Dears any sugestions how to get in userinfo endpoint required
>>>>>>>> fields (iss, sub, aud, exp) ?
>>>>>>>>
>>>>>>> --
>>>>>>> - Website: https://apereo.github.io/cas
>>>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>>>>> - Contributions: https://goo.gl/mh7qDG
>>>>>>> ---
>>>>>>> You received this message because you are subscribed to the Google
>>>>>>> Groups "CAS Community" group.
>>>>>>> To unsubscribe from this group and stop receiving emails from it,
>>>>>>> send an email to [email protected].
>>>>>>> To view this discussion on the web visit
>>>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/4690ebe5-3250-4798-bd0c-9e0925526ebco%40apereo.org
>>>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/4690ebe5-3250-4798-bd0c-9e0925526ebco%40apereo.org?utm_medium=email&utm_source=footer>
>>>>>>> .
>>>>>>>
>>>>>> --
>>>>> - Website: https://apereo.github.io/cas
>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>>> - Contributions: https://goo.gl/mh7qDG
>>>>> ---
>>>>> You received this message because you are subscribed to the Google
>>>>> Groups "CAS Community" group.
>>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>>> an email to [email protected].
>>>>> To view this discussion on the web visit
>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/ffcc34a1-0bee-48fc-b142-3c2376e0536bo%40apereo.org
>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/ffcc34a1-0bee-48fc-b142-3c2376e0536bo%40apereo.org?utm_medium=email&utm_source=footer>
>>>>> .
>>>>>
>>>> --
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to [email protected].
>>> To view this discussion on the web visit
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/df485fde-42c6-4937-b7cb-fc734039c09co%40apereo.org
>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/df485fde-42c6-4937-b7cb-fc734039c09co%40apereo.org?utm_medium=email&utm_source=footer>
>>> .
>>>
>> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/a0ef055b-2369-46df-be5c-b14970589576o%40apereo.org
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/a0ef055b-2369-46df-be5c-b14970589576o%40apereo.org?utm_medium=email&utm_source=footer>
> .
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD6Knbyd1MPrG8o-ZrFiUt7P18UWxVQ7068BNd9Wi0QmTC6hwA%40mail.gmail.com.
