Claims in IdToken about doorkeeper-openid_connect HOT 4 CLOSED

The spec has this to say:

http://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims

The Claims requested by the profile, email, address, and phone scope values are returned from the UserInfo Endpoint, as described in Section 5.3.2, when a response_type value is used that results in an Access Token being issued. However, when no Access Token is issued (which is the case for the response_type value id_token), the resulting Claims are returned in the ID Token.

This is currently not implemented, i.e. additional claims are always returned from the UserInfo endpoint. We also don't support response_type=id_token yet, or the claims parameter which would allow the client to specify where each claim should be returned (see http://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter).

I don't have any plans to implement this yet, but I want to improve the UserInfo endpoint so it filters any Standard Claims that aren't covered by the requested scopes.

from doorkeeper-openid_connect.

@gilbertquri

https://github.com/aisensiy/doorkeeper-openid_connect I have a fork and implement a way to extend the claims in id token.

from doorkeeper-openid_connect.

See related discussion in #40

from doorkeeper-openid_connect.

Also note that support for response_type=id_token was added recently in #45

from doorkeeper-openid_connect.