jfrog / jfrog-client-go

All go clients for JFrog products
Apache License 2.0
260 stars 139 forks source link

Fix username extraction on OIDC tokens with a group scope #951

Closed yahavi closed 4 months ago

yahavi commented 4 months ago

Previously, we assumed all JWT tokens followed this subject structure:

jfac@<some-characters>/users/<user-name>

However, OIDC tokens with group scopes might follow this subject structure instead:

<provider-name>/<identity-mapping>

This structure can serve as a standard username.