italia / spid-cie-oidc-django

The SPID/CIE OIDC Federation SDK, written in Python
Apache License 2.0
22 stars 25 forks source link

UserInfoResponse contains "sub" claim only #271

Open lucamontano98 opened 10 months ago

lucamontano98 commented 10 months ago

Good afternoon, I wrote a code to implement an RP and after the validation of requests and RP metadata (which both succedeed) with onboarding page tools I received an UserInfoResponse with "sub" claim only. Is it right or I miss anything? Thanks.

Luca Montano

peppelinux commented 9 months ago

Ciao Luca,

if you don't put in your request any scope/claims that are able to explicit request the claims in the id token (cie only) and in the user info endpoint (both cie and spid), see here

you'll obtain only the pairwised subject id in the userinfo endpoint