agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-11-12 13:13:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

OIDC: enable non standard claims in admin check (#230)

Browse Source 
* OIDC: enable non standard claims in admin check

* give priority to UserInfo
This commit is contained in:
Juan Zuloaga
2026-09-27 18:11:26 +02:00
committed by yu-i-i
parent 8e95ddfec1
commit 4552eef3f6
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/web/modules/authentication/oidc/app/src/OIDCAuthenticationController.mjs
+2 -1
View File
@@ -53,7 +53,8 @@ const OIDCAuthenticationController = {
}
)(req, res, next)
},
async doPassportLogin(req, issuer, profile, context, idToken, accessToken, refreshToken, done) {
async doPassportLogin(req, issuer, uiProfile, idProfile, context, idToken, accessToken, refreshToken, params, done) {
const profile = uiProfile ?? idProfile //id Profile if _skipUserProfile is true
let user, info
try {
if(req.session.intent === 'link') {
services/web/modules/authentication/oidc/app/src/OIDCAuthenticationManager.mjs
+2 -1
View File
@@ -23,7 +23,8 @@ const OIDCAuthenticationManager = {
if (attAdmin === 'email') {
isAdmin = (email === valAdmin)
} else {
isAdmin = (profile[attAdmin] === valAdmin)
const adminClaim = profile[attAdmin] || profile._json?.[attAdmin]
isAdmin = (adminClaim === valAdmin)
}
}
const oidcUserData = null // Possibly it can be used later