@@ -249,38 +249,39 @@ our custom validator. It takes one of two forms:
249249
250250The first form gets passed a request object, and should return a dictionary
251251mapping a claim name to claim data::
252+
252253 class CustomOAuth2Validator(OAuth2Validator):
253- # Set `oidc_claim_scope = None` to ignore scopes that limit which claims to return,
254- # otherwise the OIDC standard scopes are used.
254+ # Set `oidc_claim_scope = None` to ignore scopes that limit which claims to return,
255+ # otherwise the OIDC standard scopes are used.
255256
256257 def get_additional_claims(self, request):
257- return {
258- "given_name": request.user.first_name,
259- "family_name": request.user.last_name,
260- "name": ' '.join([request.user.first_name, request.user.last_name]),
261- "preferred_username": request.user.username,
262- "email": request.user.email,
263- }
258+ return {
259+ "given_name": request.user.first_name,
260+ "family_name": request.user.last_name,
261+ "name": ' '.join([request.user.first_name, request.user.last_name]),
262+ "preferred_username": request.user.username,
263+ "email": request.user.email,
264+ }
264265
265266
266267The second form gets no request object, and should return a dictionary
267268mapping a claim name to a callable, accepting a request and producing
268269the claim data::
269270 class CustomOAuth2Validator(OAuth2Validator):
270- # Extend the standard scopes to add a new "permissions" scope
271- # which returns a "permissions" claim:
272- oidc_claim_scope = OAuth2Validator.oidc_claim_scope
273- oidc_claim_scope.update({"permissions": "permissions"})
274-
275- def get_additional_claims(self):
276- return {
277- "given_name": lambda request: request.user.first_name,
278- "family_name": lambda request: request.user.last_name,
279- "name": lambda request: ' '.join([request.user.first_name, request.user.last_name]),
280- "preferred_username": lambda request: request.user.username,
281- "email": lambda request: request.user.email,
282- "permissions": lambda request: list(request.user.get_group_permissions()),
283- }
271+ # Extend the standard scopes to add a new "permissions" scope
272+ # which returns a "permissions" claim:
273+ oidc_claim_scope = OAuth2Validator.oidc_claim_scope
274+ oidc_claim_scope.update({"permissions": "permissions"})
275+
276+ def get_additional_claims(self):
277+ return {
278+ "given_name": lambda request: request.user.first_name,
279+ "family_name": lambda request: request.user.last_name,
280+ "name": lambda request: ' '.join([request.user.first_name, request.user.last_name]),
281+ "preferred_username": lambda request: request.user.username,
282+ "email": lambda request: request.user.email,
283+ "permissions": lambda request: list(request.user.get_group_permissions()),
284+ }
284285
285286
286287Standard claim ``sub `` is included by default, to remove it override ``get_claim_dict ``.
0 commit comments