vmware-archive / gangway

An application that can be used to easily enable authentication flows via OIDC for a kubernetes cluster.
Apache License 2.0
410 stars 113 forks source link

Display JWT claims after successfully signing in #99

Closed alexbrand closed 3 years ago

alexbrand commented 5 years ago

The JWT claims are used by the kubernetes authentication system to determine a user's username and group membership.

Currently, knowing the username and groups of the user logging in is cumbersome. You have to copy the ID token and decode using something like jwt.io.

Instead, gangway could show the JWT claims on the post-login page. I can think of two user stories for this:

Open question: Are there any security concerns with displaying the claims in the browser?