In Authorization request I need claims for Approve access screen.
Dne pátek 26. června 2020 15:50:55 UTC+2 ste napsal(a): > > Ok maybe you need it in response, but not when you request Authorization. > > Le ven. 26 juin 2020 à 15:20, Jakub Fridrich <[email protected] > <javascript:>> a écrit : > >> Yes, for userinfo endpoint I think */cas/oidc/profile*. >> >> For claims, I need this params, generated with XWiki. The above claim it >> I testing. >> *&claims=*{"id_token":{"xwiki_instance_id":null},"userinfo":{ >> "xwiki_user_accessibility":null,"xwiki_user_displayHiddenDocuments":null, >> "xwiki_user_editor":null,"xwiki_user_usertype":null,"xwiki_user_company": >> null}} >> >> >> >> Dne pátek 26. června 2020 15:08:28 UTC+2 ste napsal(a): >>> >>> Ok all look good. >>> So what is that : >>> *&claims=* >>> *{"userinfo":{"sub":null,"iss":null,"openid":null,"profile":null,"name":null,"email":null,"first_name":null,"last_name":null}}* >>> you don't need it in /cas/oidc/authorize >>> >>> And when you talk about "In *userinfo* endpoint I getting now" what is >>> your user info endpoint ? /cas/iodc/profile ? >>> >>> >>> Le ven. 26 juin 2020 à 14:33, Jakub Fridrich <[email protected]> >>> a écrit : >>> >>>> Hi, >>>> .well-known return this JSON (in attachment) >>>> >>>> >>>> >>>> >>>> Dne pátek 26. června 2020 13:50:17 UTC+2 ste napsal(a): >>>>> >>>>> Hi, You see it here : /cas/oidc/.well-known ? >>>>> >>>>> Le ven. 26 juin 2020 à 09:07, Jakub Fridrich < >>>>> [email protected]> a écrit : >>>>> >>>>>> Thanks, but attributes not showing still.. >>>>>> >>>>>> My service now looks like: >>>>>> { >>>>>> "@class" : "org.apereo.cas.services.OidcRegisteredService", >>>>>> "clientId": "XXXX", >>>>>> "clientSecret": "XXXXXX-XXXXX", >>>>>> "serviceId": "^https://xwikl.XXXXXXX*";, >>>>>> "name": "XXXX", >>>>>> "id": 20, >>>>>> >>>>>> "scopes" : [ "java.util.HashSet", >>>>>> [ "openid", "profile", "email", "address" ] >>>>>> ] >>>>>> } >>>>>> >>>>>> >>>>>> Requested url for Authorize endpoint (URL decoded): >>>>>> https://auth.XXXXXX.XX/cas/oidc/authorize >>>>>> ?scope=openid%20profile%20email%20address%20phone >>>>>> >>>>>> *&claims=* >>>>>> *{"userinfo":{"sub":null,"iss":null,"openid":null,"profile":null,"name":null,"email":null,"first_name":null,"last_name":null}}* >>>>>> >>>>>> &response_type=code >>>>>> &redirect_uri=https%3A%2F%2Fxwikl.xxxxx%2Fxxx%2Foidc%2Fauthenticator% >>>>>> 2Fcallback >>>>>> &client_id=XXXXXXX >>>>>> >>>>>> >>>>>> In *userinfo* endpoint I getting now: >>>>>> { >>>>>> "email":"[email protected]", >>>>>> "first_name":"Somename", >>>>>> "last_name":"Somesuername", >>>>>> "name":"somename.somesurname" >>>>>> } >>>>>> >>>>>> I need in userinfo endpoint items as sub, iss, aud, etc... >>>>>> >>>>>> What am I doing wrong? >>>>>> >>>>>> Thanks >>>>>> >>>>>> >>>>>> Dne čtvrtek 25. června 2020 16:02:30 UTC+2 Stéphane Delcourt >>>>>> napsal(a): >>>>>>> >>>>>>> you should remove the attributeReleasePolicy and replace it with >>>>>>> >>>>>>> "scopes" : [ "java.util.HashSet", >>>>>>> [ "openid", "profile", "email", "address" ] >>>>>>> ] >>>>>>> >>>>>>> >>>>>>> Le jeu. 25 juin 2020 à 15:59, Jakub Fridrich < >>>>>>> [email protected]> a écrit : >>>>>>> >>>>>>>> I tried adding to Release policy (to service), but sub is not >>>>>>>> showing still. >>>>>>>> "attributeReleasePolicy" : { >>>>>>>> "@class" : >>>>>>>> "org.apereo.cas.oidc.claims.OidcProfileScopeAttributeReleasePolicy" >>>>>>>> , >>>>>>>> "allowedAttributes" : [ "java.util.ArrayList", [ "sub", >>>>>>>> "first_name", "last_name", "email" ] ] >>>>>>>> } >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Dne čtvrtek 25. června 2020 13:04:33 UTC+2 Jakub Fridrich napsal(a): >>>>>>>>> >>>>>>>>> info: CAS 6.2.0-RC5 builded from cas-overlay-template >>>>>>>>> >>>>>>>>> Problem: >>>>>>>>> OpenID Connect in userinfo endpoint does not display required >>>>>>>>> attributes (as iss, sub, aud, exp) if claims are set. >>>>>>>>> >>>>>>>>> Scopes requested by client: openid, profile, email, address, phone >>>>>>>>> Claims requested by client: {"userinfo":{ "sub":null, "iss": >>>>>>>>> null, "name": null, "email": null, "first_name": null, "last_name": >>>>>>>>> null }} >>>>>>>>> or {"userinfo":{"name": null, "email": null, "first_name": null, >>>>>>>>> "last_name": null }} >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> Service configuration: >>>>>>>>> { >>>>>>>>> "@class" : "org.apereo.cas.services.OidcRegisteredService", >>>>>>>>> "clientId": "XXX", >>>>>>>>> "clientSecret": "XXX", >>>>>>>>> "serviceId": "^https://xwikl.xxxserver.*";, >>>>>>>>> "name": "XTest", >>>>>>>>> "id": 5, >>>>>>>>> >>>>>>>>> "attributeReleasePolicy" : { >>>>>>>>> "@class" : >>>>>>>>> "org.apereo.cas.services.ReturnAllAttributeReleasePolicy" >>>>>>>>> } >>>>>>>>> } >>>>>>>>> >>>>>>>>> >>>>>>>>> Dears any sugestions how to get in userinfo endpoint required >>>>>>>>> fields (iss, sub, aud, exp) ? >>>>>>>>> >>>>>>>> -- >>>>>>>> - Website: https://apereo.github.io/cas >>>>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>>>>> - Contributions: https://goo.gl/mh7qDG >>>>>>>> --- >>>>>>>> You received this message because you are subscribed to the Google >>>>>>>> Groups "CAS Community" group. >>>>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>>>> send an email to [email protected]. >>>>>>>> To view this discussion on the web visit >>>>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/4690ebe5-3250-4798-bd0c-9e0925526ebco%40apereo.org >>>>>>>> >>>>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/4690ebe5-3250-4798-bd0c-9e0925526ebco%40apereo.org?utm_medium=email&utm_source=footer> >>>>>>>> . >>>>>>>> >>>>>>> -- >>>>>> - Website: https://apereo.github.io/cas >>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>>> - Contributions: https://goo.gl/mh7qDG >>>>>> --- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "CAS Community" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>> send an email to [email protected]. >>>>>> To view this discussion on the web visit >>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/ffcc34a1-0bee-48fc-b142-3c2376e0536bo%40apereo.org >>>>>> >>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/ffcc34a1-0bee-48fc-b142-3c2376e0536bo%40apereo.org?utm_medium=email&utm_source=footer> >>>>>> . >>>>>> >>>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/df485fde-42c6-4937-b7cb-fc734039c09co%40apereo.org >>>> >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/df485fde-42c6-4937-b7cb-fc734039c09co%40apereo.org?utm_medium=email&utm_source=footer> >>>> . >>>> >>> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/a0ef055b-2369-46df-be5c-b14970589576o%40apereo.org >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/a0ef055b-2369-46df-be5c-b14970589576o%40apereo.org?utm_medium=email&utm_source=footer> >> . >> > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/4c722b90-6197-46b4-a71f-7ab73c054234o%40apereo.org.
