Skip to content

Commit 776db29

Browse files
committed
removed annotations
1 parent d04b6ea commit 776db29

File tree

1 file changed

+0
-20
lines changed

1 file changed

+0
-20
lines changed

modules/authentication/proc-reducing-token-size.adoc

Lines changed: 0 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,6 @@ This makes it easier for consumers of the token to resolve ownership of the user
88
However, depending on the structure of your organization and how you resolve ownership claims, the tokens can grow large and cause HTTP errors that prevent you from accessing parts of {product-very-short}.
99
Use the `omitIdentityTokenOwnershipClaim` flag to remove the `ent` claim from tokens and reduce their size.
1010

11-
[IMPORTANT]
12-
====
13-
Without the `ent` claim in the token, consumers of the token must call the `/v1/userinfo` endpoint on the auth backend to fetch the ownership references of the user.
14-
However, there is usually no action required for the consumers.
15-
Clients still receive the full set of claims during authentication, and plugin backends that use the `UserInfoService` to access the ownership references from user credentials can call the `userinfo` endpoint if necessary.
16-
====
17-
1811
.Procedure
1912

2013
. In the `{my-app-config-file}` file, set `omitIdentityTokenOwnershipClaim` to `true` as follows:
@@ -24,17 +17,4 @@ Clients still receive the full set of claims during authentication, and plugin b
2417
auth:
2518
omitIdentityTokenOwnershipClaim: true
2619
----
27-
+
28-
[IMPORTANT]
29-
====
30-
When you enable the `omitIdentityTokenOwnershipClaim` flag, it is important that any custom sign-in resolvers return directly the result of the sign-in method.
31-
32-
Example of a correct setup::
33-
34-
[source,yaml,subs="+attributes"]
35-
----
36-
return ctx.issueToken({
37-
claims: { sub: entityRef, ent: [entityRef] },
38-
});
39-
----
4020

0 commit comments

Comments
 (0)