-
Notifications
You must be signed in to change notification settings - Fork 467
feat: Add custom claims from Keycloak user token #1917
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Pull Request Test Coverage Report for Build 15463301096Details
💛 - Coveralls |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks okay to me, lets wait for a +1 from @hf or @kangmingtay before merging. I'm not sure the affect this could have on JWT sizes.
Hi @hf @kangmingtay @cstockton is there anything I can look at to merge this feature? |
This would be useful for a use case that we have. Is there anything I can do to help? |
What is the timeline for merging this feature? |
@cstockton can we merge this please? |
@ion-elgreco @wdoppenberg @dhcsousa My apologies for the delay, I've seen no objections so I'll go ahead and merge this. |
🤖 I have created a release *beep* *boop* --- ## [2.176.0](v2.175.0...v2.176.0) (2025-06-11) ### Features * Add custom claims from Keycloak user token ([#1917](#1917)) ([1365aaa](1365aaa)) ### Bug Fixes * accept ID tokens from all `account.apple.com` and `appleid.apple.com` ([#2050< 73B4 /a>](#2050)) ([82aa167](82aa167)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
What kind of change does this PR introduce?
This change will populate the
CustomClaims
field from theClaims
struct with 'other' claims from the Keycloak user token.What is the current behavior?
Currently only
Name
,Sub
,Email
, andEmailVerified
are taken from the Keycloak user token.What is the new behavior?
The "custom_claims" field in the retrieved JWT is populated.
Additional context