logto icon indicating copy to clipboard operation
logto copied to clipboard

how can i change the claims_supported value

Open sekfung opened this issue 7 months ago β€’ 1 comments

Describe the bug

Image

in my openid-configuration, i can not find exp, aud,

Image

Expected behavior

claims_supported include ['iss', 'exp', 'aud', 'email']

How to reproduce?

self hosted

Environment

Self-hosted (Docker image)

Screenshots

No response

sekfung avatar May 28 '25 03:05 sekfung

Thanks for raising this. Just to clarify:

  • Logto's ID tokens do include standard claims such as iss, exp, and aud as expected.

  • However, per the OpenID Connect Discovery 1.0 specification, the claims_supported field is RECOMMENDED, and the list it provides is not guaranteed to be exhaustive. Providers may choose not to list every supported claim for privacy or other reasons.

Given this, I would recommend loosening the strict validation on the claims_supported metadata. Instead, it’s more robust to validate the actual ID token received, which will reliably indicate what claims are present in a specific authentication flow.

simeng-li avatar May 28 '25 03:05 simeng-li