search

Haufe-Lexware / wicked.haufe.io

An API Management system based on Mashape Kong
http://wicked.haufe.io
Other
123 stars 37 forks source link

ProfileEndpoint for wicked.auth not implemented yet? #208

Closed Iblis closed 5 years ago

Iblis commented 5 years ago

Hi! I used the Kickstarter to configure an OAuth2 endpoint and set a profileEndpoint to fetch the profile from there. Authentication does not work and after digging into it a bit, it looks like this configuration option is not implemented yet and the auth fails because wicked tries to find the email claim in the accessToken, but it is not in there because it is expected to fetch this from the profileEndpoint. Is this correct and if so what is the current schedule for this feature? Any help needed on that part?

DonMartin76 commented 5 years ago

This is most probably correct, unfortunately. We were looking at fully implementing this when the support for OIDC #184 is implemented. It shouldn't be very difficult to just in the mean time implement a simple "fetch from profile end point", but I just haven't had time for it. PRs are very welcome.

Iblis commented 5 years ago

PR can be found here https://github.com/apim-haufe-io/wicked.auth/pull/7

DonMartin76 commented 5 years ago

Merged, will land in 1.0.0-rc.7. THANKS!