The id_token that is issued when the `openid` scope is set does not contain the 
`preferred_username` claim which would require external applications using OIDC 
to make another request to the API to be able to get the (current) user name to 
address users more personally.
I did not found any information if the decision to not include this claim in 
the token was deliberate? Otherwise this pull request would change the 
Doorkeeper configuration so the `preferred_username` is also included in the 
id_token
You can view, comment on, or merge this pull request online at:

  https://github.com/openstreetmap/openstreetmap-website/pull/6429

-- Commit Summary --

  * Include preferred_username claim in OIDC ID token

-- File Changes --

    M config/initializers/doorkeeper_openid_connect.rb (2)
    M test/integration/oauth2_test.rb (2)

-- Patch Links --

https://github.com/openstreetmap/openstreetmap-website/pull/6429.patch
https://github.com/openstreetmap/openstreetmap-website/pull/6429.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/6429
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/[email protected]>
_______________________________________________
rails-dev mailing list
[email protected]
https://lists.openstreetmap.org/listinfo/rails-dev

Reply via email to