okta-nginx
okta-nginx copied to clipboard
Feature request: Support retrieving additional metadata via `/userinfo`
It would be nice to optionally retrieve additional claims that are only accessible via the /userinfo
endpoint (eg if the ID groups
claim is only accessible via the /userinfo
endpoint instead of Always
).
I understand the ask... but I am not seeing in the documentation where some claims are only accessible via /userinfo
. Can you not just add the groups
scope?
For reference.. If I understand correctly you could get at these with additional scopes added to the scope query parameter https://developer.okta.com/docs/reference/api/oidc/#scope-dependent-claims-not-always-returned
You can set a custom claim on an auth server to only be accessible via /userinfo
.