This issue has been created
There are 2 updates, 1 comment.
 
 
OpenId Connect / cid:jira-generated-image-avatar-0ae2b02c-1e6a-4a0b-99fe-bd2fdc8b1e1d OIDC-184 In Progress

The authenticator does not support signed or encrypted userinfo
 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-b5c65c96-8b17-45ca-89e8-ffa468900e8e Thomas Mortagne created this issue on 01/Jul/24 17:28
 
Summary: The authenticator does not support signed or encrypted userinfo
Issue Type: cid:jira-generated-image-avatar-0ae2b02c-1e6a-4a0b-99fe-bd2fdc8b1e1d Bug
Affects Versions: 2.10.0
Assignee: Unassigned
Components: Authenticator
Created: 01/Jul/24 17:28
Priority: cid:jira-generated-image-static-major-0cf4380b-3950-4f03-9c5c-2b8bbf75d1fe Major
Reporter: Thomas Mortagne
Description:

According to the specification, it's possible for an userinfo to be sent back by the provider as a JWT.
 
 

2 updates

 
cid:jira-generated-image-avatar-b5c65c96-8b17-45ca-89e8-ffa468900e8e Changes by Thomas Mortagne on 01/Jul/24 17:28
 
Assignee: Thomas Mortagne
Status: Open In Progress
 
 

1 comment

 
cid:jira-generated-image-avatar-b5c65c96-8b17-45ca-89e8-ffa468900e8e Thomas Mortagne on 01/Jul/24 17:29
 

The OIDC sdk does not provide any tool to take care of that so I should ideally start by a pull request on their side to add a UserInfoValidator.
 
 
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6) Atlassian logo
If image attachments aren't displayed, see this article.