Skip to content

Fix #44332 - Add support for profile and email

GotenXiao requested to merge GotenXiao/gitlab-ce:44332-openid-scope-error into master

What does this MR do?

Adds support for the OpenID Connect profile and email scopes.

A quick demonstration application as a relying party on GitLab's OpenID Connect, with the following scopes then configured in the application menu:
image

Successful challenge from the application to GitLab:
image

Successful redirect back to example application with claim values:
image

GitLab already had support for these fields, this merely surfaces that support behind the standard claim types so that other applications (e.g. Sourcegraph, Artifactory, etc) can directly consume GitLab as an OpenID Connect IdP.

What are the relevant issue numbers?

Does this MR meet the acceptance criteria?

Closes #44332 (closed)

Edited by Nick Thomas

Merge request reports