Skip to content

Updated request params to include requesting individual claims

Eric Plasterrequested to merge
xuru/django-oauth2-authcodeflow:master into master

Adds another setting for extra claims in the id_token or userinfo according to the RFC (https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter).

As an example, here is an API that uses claims that must be set in order to get the information in the id_token, or user info endpoint: https://jackhenry.dev/open-api-docs/authentication-framework/overview/openidconnectoauth/

Let me know if I should change the way we present the option. For example, we could offer two lists of claims to be requested, OIDC_RP_USERINFO_CLAIMS and OIDC_RP_TOKEN_CLAIMS, instead of a dictionary that must be in the correct format.

Merge request reports