OpenConext / OpenConext-oidcng

OpenID Connect gateway - The Next Generation
3 stars 5 forks source link

Add scope information to the audience in the /tokens endpoint #178

Closed phavekes closed 1 month ago

phavekes commented 1 month ago

This issue is imported from pivotal - Originaly created at Aug 22, 2022 by Bart Geesink

The /tokens endpoint can be used to retrieve information about access tokens.

Currently is shows the "audiences" and "scopes" in two different fields. Hower, the scopes belong to a certain audience. In order to properly display the information in Profile (eg this access token is used to retrieve "the student grades" at the "university of maastricht server" we need to connect them.

We would like to implement the insight of access tokens in Profile. I\'ve attached an image as how this is going to be presented.

When looking at the current information that the endpoint gives back now, I think it should be in the audience field as extra information, and fill it with: name:en: "$THE_NAME_EN_FROM_MANAGE", description:en: "$THE_DESCRIPTION_FROM_MANAGE", OrganizationName:en: "$THE_ORGANIZATIONNAME_FROM_MANAGE" name:nl: "$THE_NAME_EN_FROM_MANAGE", description:nl: "$THE_DESCRIPTION_FROM_MANAGE", OrganizationName:nl: "$THE_ORGANIZATIONNAME_FROM_MANAGE" logo_url: https://thelogourlfrommanage scope and descriptions for this resource server

phavekes commented 1 month ago

(Bart Geesink - Oct 4, 2022)

phavekes commented 1 month ago

https://github.com/OpenConext/OpenConext-oidcng/wiki/Token-API (Okke Harsta - Oct 5, 2022)