OpenIdConnectHandler ClaimActions not working

[plano-fwinkler]

Is there an existing issue for this?

• I have searched the existing issues

Describe the bug

In the OpenIdConnectHandler Class Line 912 the ClaimActions does nothing because it is using an empty Payload Document.

using (var payload = JsonDocument.Parse("{}"))
{
var identity = (ClaimsIdentity)user!.Identity!;
foreach (var action in Options.ClaimActions)
{
action.Run(payload.RootElement, identity, ClaimsIssuer);
}
}

Expected Behavior

No response

Steps To Reproduce

No response

Exceptions (if any)

No response

.NET Version

8.0

Anything else?

No response

[MackinnonBuck]

Thanks for reaching out, @plano-fwinkler.

Could you please try setting OpenIdConnectOptions.GetClaimsFromUserInfoEndpoint to true so that the user info endpoint provides claims?

The JsonElement is only intended to be the user info response. If you're only interested in the claims in the access token, it's fine to have an empty JsonElement. The ClaimsIdentity will have all the claims from the access token and your action will still run.

[dotnet-policy-service]

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment. If it is closed, feel free to comment when you are able to provide the additional information and we will re-investigate.

See our Issue Management Policies for more information.