[AlphaConfig] OIDC 令牌中的某些声明无法通过 ClaimSource 访问

作者: joraff创建于 2023年1月5日更新于 2026年8月24日
标签enhancementhelp wantedgood first issueneeds tests

When successfully getting a token from an OIDC provider that includes claims like upn, given_name, and family_name, those claims are not being read by the ClaimSource data type in alphaConfig, such as for use in injectRequestHeaders.

Expected Behavior

The following code should create a X-Provider-User user with the upn value from the ID token:

yaml
injectRequestHeaders:
  - name: X-Provider-User
    values:
      - claim: upn

Repeat with claims family_name, given_name, and email. All claim values are being provided by the IdP, but only the email claim results in a header being set.

内容来源: oauth2-proxy/oauth2-proxy