[AlphaConfig] OIDC 令牌中的某些声明无法通过 ClaimSource 访问
作者: joraff创建于 2023年1月5日更新于 2026年8月24日
标签enhancementhelp wantedgood first issueneeds tests
When successfully getting a token from an OIDC provider that includes claims like upn, given_name, and family_name, those claims are not being read by the ClaimSource data type in alphaConfig, such as for use in injectRequestHeaders.
Expected Behavior
The following code should create a X-Provider-User user with the upn value from the ID token:
injectRequestHeaders:
- name: X-Provider-User
values:
- claim: upn Repeat with claims family_name, given_name, and email. All claim values are being provided by the IdP, but only the email claim results in a header being set.
内容来源: oauth2-proxy/oauth2-proxy