AnthonyDeroche / mod_authnz_jwt

An authentication module for Apache httpd using JSON Web Tokens
Other
79 stars 46 forks source link

support nested claims #36

Open juliantaylor opened 5 years ago

juliantaylor commented 5 years ago

some oidc providers like for example https://github.com/dexidp/dex produce jwt's with claim fields nested.

For example:

{
  "iss": "..."
  "federated_claims": {
    "connector_id": "ldap",
    "user_id": "userid"
  }
}

As far as I can tell this module does not support these claims for e.g. Require jwt-claim or AuthJWTAttributeUsername

Would it make sense to add support for these type of claims in this module? E.g. via federated_claims.user_ud

AnthonyDeroche commented 5 years ago

Hello, Yes it would be a great improvement. As I have no time to spend for this, some help would be great. Anthony