GluuFederation / gluu-passport

Gluu interface to Passport.js to support social login and inbound identity.
Apache License 2.0
6 stars 16 forks source link

fix: extra scope are not sending in passport #538

Closed mmrraju closed 1 year ago

mmrraju commented 1 year ago

Describe the issue

We are trying to send some extra scope in openid-client passport provider but scopes are not sending and granted except default ones ["openid","email","profile"]. According to ticket

Steps To Reproduce

Steps to reproduce the behavior:

  1. Install passport on my local server.
  2. Create a passport provider type: openid-client
  3. Creat an openid client on remote server.
  4. Provide client info in local passport providers options. Here scopes are ["openid","email","profile","phone","clientinfo"]
  5. For the local server We check "passport.log"
  6. For the RS we check "oxauth.log"

Expected behavior

For RS oxauth.log

  1. In here scope should be ["openid","email","profile","phone","clientinfo"]
  2. Here Granted scope should be ["openid","email","profile","phone","clientinfo"]

For LS passport.log

  1. In provider config scopes are ["openid","email","profile","phone","clientinfo"]
  2. Here response should be with scope ["openid","email","profile","phone","clientinfo"]

Actual behavior

For RS oxauth.log

  1. In "gluu.oxauth.authorize.ws.rs.AuthorizeRestWebServiceImpl" we see scope=["openid","email","profile"]
  2. Here Granted scope only ["openid","email","profile"]

For LS passport.log

  1. we get response with scope ["openid","email","profile"]

Desktop (please complete the following information):

crazedmeph commented 1 year ago

@mzico @kdhttps any update on this one? This is holding me back from upgrading to version 4.5

mzico commented 1 year ago

@crazedmeph : we are trying to do some final testing from this end before developer jump inside the code. @mmrraju