`null` username when using GitLab as OIDC provider.

[pawelrubin]

When connecting to AKHQ using GitLab OIDC, the username field is null

{
    "logged": true,
    "username": "null"
}

despite setting the username-field to nickname. According to GitLab docs, the nickname field should be available.

AKHQ_CONFIGURATION file:

akhq:
  connections:
    ...

  security:
    default-group: no-roles
    oidc:
      enabled: true
      providers:
        gitlab:
          label: Log in with GitLab
          default-group: reader
          groups-field: groups
          username-field: nickname

micronaut:
  security:
    enabled: true
    oauth2:
      enabled: true
      clients:
        gitlab:
          client-id: <oidc-id>
          client-secret: <oidc-secret>
          scopes:
            - openid
            - profile
            - email
          openid:
            issuer: <gitlab-url>

[twobeeb]

Hello, The gitlab doc also specifies the following:

The claims sub, sub_legacy, email, email_verified and groups_direct are included in the ID token. All other claims are available from the /oauth/userinfo endpoint used by OIDC clients.

[pawelrubin]

Hi @twobeeb,

Excellent remark! The email claim indeed works fine.

However, if one wants to use the nickname claim, do you know, by any chance, how to use the /oauth/userinfo endpoint?

[tchiotludo]

It's not possible as I know. To do this, you need to implement a custom User Mapper for each provider. I don't think we are going to support this due to huge amount of work for each one.