Token acquisition API should respond with info which Account has been authenticated

personium / personium-core

Core module of Personium

https://personium.io

Apache License 2.0

88 stars 16 forks source link

Token acquisition API should respond with info which Account has been authenticated #39

Closed hideakikondo closed 5 years ago

hideakikondo commented 7 years ago

Problem When you try to get an access token with Open ID Connect (e.g. Google) authentication API, the request parameter does not contain Account name. Therefore, a client application cannot take information which Account authenticated.
Solution X-Personium-Authenticated-Account response header would be added to Token acquisition API.

hideakikondo commented 7 years ago

case: grant_type = password => The same value of request parameter "username=XXX" grant_type = urn:x-personium:oidc:google =>Gmail address in decoded ID token value.

shimono commented 5 years ago

The aim of this issue will be achieved through the following issue fix; https://github.com/personium/personium-core/issues/281

So I am closing this issue.