fosite
fosite copied to clipboard
feat: store JWT claims in access request
Store the decoded JWT claims in the access request when performing an RFC 7523 request, so they can be inspected after validation.
Related Issue or Design Document
https://github.com/ory/hydra/pull/3949
Checklist
- [x] I have read the contributing guidelines and signed the CLA.
- [ ] I have referenced an issue containing the design document if my change introduces a new feature.
- [x] I have read the security policy.
- [x] I confirm that this pull request does not address a security vulnerability. If this pull request addresses a security vulnerability, I confirm that I got approval (please contact [email protected]) from the maintainers to push the changes.
- [ ] I have added tests that prove my fix is effective or that my feature works.
- [ ] I have added the necessary documentation within the code base (if appropriate).
Further comments
Please rebase from latest master branch to fix CI issues.
I am not completely sure you need this? I do ar.GetSession().(*OIDCSession).JWTClaims in my code (JWTClaims is where I store claims inside my OIDCSession implementation).
Example here and example here.