The authentication now uses the ID token to retrieve user data. This is necessary because some identity providers do not return requested claims through the user info endpoint but incldue them in the ID token only. A cascading mechanism to retreive claims during authentication shall be implemented. First the claim shall be looked up in the ID token. If the claim is not found then the user info endpoint shall be contacted to get the claim. In most cases this also should save a couple of http requests.
Description
Description
Details
Details
Customize query in gerrit
Event Timeline
Comment Actions
Change 965852 had a related patch set uploaded (by Vajdaz; author: Vajdaz):
[mediawiki/extensions/OpenIDConnect@master] Use ID token to get claims during authentication
Comment Actions
Change 965852 merged by jenkins-bot:
[mediawiki/extensions/OpenIDConnect@master] Use ID token to get claims during authentication
Comment Actions
Change 965896 had a related patch set uploaded (by Cicalese; author: Vajdaz):
[mediawiki/extensions/OpenIDConnect@REL1_39] Use ID token to get claims during authentication
Comment Actions
Change 965897 had a related patch set uploaded (by Cicalese; author: Vajdaz):
[mediawiki/extensions/OpenIDConnect@REL1_40] Use ID token to get claims during authentication
Comment Actions
Change 965898 had a related patch set uploaded (by Cicalese; author: Vajdaz):
[mediawiki/extensions/OpenIDConnect@REL1_41] Use ID token to get claims during authentication
Comment Actions
Change 965896 merged by jenkins-bot:
[mediawiki/extensions/OpenIDConnect@REL1_39] Use ID token to get claims during authentication
Comment Actions
Change 965897 merged by jenkins-bot:
[mediawiki/extensions/OpenIDConnect@REL1_40] Use ID token to get claims during authentication
Comment Actions
Change 965898 merged by jenkins-bot:
[mediawiki/extensions/OpenIDConnect@REL1_41] Use ID token to get claims during authentication