search

aspnet-contrib / AspNet.Security.OAuth.Providers

OAuth 2.0 social authentication providers for ASP.NET Core
Apache License 2.0
2.38k stars 538 forks source link

[rel/3.1.8] Extract email from ID token not user parameter #718

Closed martincostello closed 2 years ago

martincostello commented 2 years ago

Use the verified ID token JWT as the source of the email claim rather than the user parameter in the callback for the Apple provider.

As a result of this change, the ClaimTypes.GivenName and ClaimTypes.Surname claims are no longer set.

Backport of #716 for #713.