Skip to content

Conversation

@pfefferle
Copy link
Member

Summary

Adds the sub claim to token responses, setting it to the same value as me. This is required for compatibility with pure OAuth clients like mod_oauth2.

  • Only sets sub when me property is present (safety check)
  • Updates tests to include me in test tokens and expect sub in responses

Fixes #286

Based on #288 by @carrvo

@pfefferle
Copy link
Member Author

Sorry, I accidentally merged it! I reverted everything and re-added the PR.

@dshanske
Copy link
Member

The only reason I was reluctant about this is that it technically is not in the spec.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Introspection could use SUB claim for Pure OAuth client Compatibility

3 participants