diff options
| author | KN4CK3R <admin@oldschoolhack.me> | 2021-06-14 12:33:16 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-06-14 13:33:16 +0300 |
| commit | 1295e750b4b8cec5476e7666bf9f8f3a02b39785 (patch) | |
| tree | dac0a6348e52a7cd8f6428bf74a9bc2f8b54194c /models | |
| parent | 2b39357443100188ceee0a68408416d166037247 (diff) | |
| download | gitea-1295e750b4b8cec5476e7666bf9f8f3a02b39785.tar.gz gitea-1295e750b4b8cec5476e7666bf9f8f3a02b39785.zip | |
Add OpenID claims "profile" and "email". (#16141)
* Added OpenID claims "profile" and "email".
* Splitted error.
* Added scopes_supported and claims_supported.
* Added more metadata.
Co-authored-by: techknowlogick <techknowlogick@gitea.io>
Co-authored-by: Lauris BH <lauris@nix.lv>
Diffstat (limited to 'models')
| -rw-r--r-- | models/oauth2_application.go | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/models/oauth2_application.go b/models/oauth2_application.go index 679fdb18f9..82d8f4cdf7 100644 --- a/models/oauth2_application.go +++ b/models/oauth2_application.go @@ -394,7 +394,7 @@ func (grant *OAuth2Grant) TableName() string { return "oauth2_grant" } -// GenerateNewAuthorizationCode generates a new authorization code for a grant and saves it to the databse +// GenerateNewAuthorizationCode generates a new authorization code for a grant and saves it to the database func (grant *OAuth2Grant) GenerateNewAuthorizationCode(redirectURI, codeChallenge, codeChallengeMethod string) (*OAuth2AuthorizationCode, error) { return grant.generateNewAuthorizationCode(x, redirectURI, codeChallenge, codeChallengeMethod) } @@ -567,6 +567,19 @@ func (token *OAuth2Token) SignToken() (string, error) { type OIDCToken struct { jwt.StandardClaims Nonce string `json:"nonce,omitempty"` + + // Scope profile + Name string `json:"name,omitempty"` + PreferredUsername string `json:"preferred_username,omitempty"` + Profile string `json:"profile,omitempty"` + Picture string `json:"picture,omitempty"` + Website string `json:"website,omitempty"` + Locale string `json:"locale,omitempty"` + UpdatedAt timeutil.TimeStamp `json:"updated_at,omitempty"` + + // Scope email + Email string `json:"email,omitempty"` + EmailVerified bool `json:"email_verified,omitempty"` } // SignToken signs an id_token with the (symmetric) client secret key |