owncloud / openidconnect

OpenId Connect (OIDC) Integration for ownCloud
GNU General Public License v2.0
6 stars 2 forks source link

fix: user information is only read from the JWT token if configured a… #250

Closed DeepDiver1975 closed 1 year ago

DeepDiver1975 commented 1 year ago

…s such

Description

User info can be retrieved from the user info endpoint, token introspection endpoint of from the the jwt token In some deployment scenarios in is necessary to NOT read the user information from the JWT token but rely on user info endpoint.

For this scenario we brought back the config option 'use-access-token-payload-for-user-info' to explicitly enable if the info shall be read from the token

Related Issue

How Has This Been Tested?

On test env - refs #248

Types of changes

Checklist:

Open tasks:

DeepDiver1975 commented 1 year ago

@mmattel due to a regression found by qa we need to bring back the config option we recently removed - https://github.com/owncloud/docs-server/issues/561

sorry for the mess and the extra effort

mmattel commented 1 year ago

I start reverting now which would be ok because the new 10.11 release will not be published this week

sonarcloud[bot] commented 1 year ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell B 1 Code Smell

0.0% 0.0% Coverage
0.0% 0.0% Duplication

jnweiger commented 1 year ago

Confirmed fixed in openidconnect 2.2.0-rc.3