meutel/oauth2_proxy
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fall back to using sub if email is none (as in PR #57)

Browse Source
This commit is contained in:
Brian Van Klaveren 2019-05-01 09:22:25 -07:00
parent 79acef9036
commit 58b06ce761
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
oauthproxy.go
View File

@ -901,6 +901,7 @@ func (p *OAuthProxy) GetJwtSession(req *http.Request) (*sessionsapi.SessionState
} }
var claims struct { var claims struct {
Subject string `json:"sub"`
Email string `json:"email"` Email string `json:"email"`
Verified *bool `json:"email_verified"` Verified *bool `json:"email_verified"`
} }
@ -910,7 +911,7 @@ func (p *OAuthProxy) GetJwtSession(req *http.Request) (*sessionsapi.SessionState
} }
if claims.Email == "" { if claims.Email == "" {
return nil, fmt.Errorf("id_token did not contain an email") claims.Email = claims.Subject
} }
if claims.Verified != nil && !*claims.Verified { if claims.Verified != nil && !*claims.Verified {