Vaibhav Medhekar
Reputation: 11
How to get 'sub' claim on access_token in client credentials grant using oidc-provider npm package
The access_token generated using oidc-provider package for client_credentials grant does not contain 'sub' claim. As per spec: RFC 7523 : JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants
Please check the image for RFC
I wanted to add 'sub' claim to the access_token for client_credentials grant and populate it with the clientId.
I tried to call 'extraAccessTokenClaims' from OidcConfiguration to add 'sub' claim, but somehow oidc-provider package is removing this claim from access_token.
Any lead to resolve this issue will be really helpful.
Upvotes: 1
Views: 401
Answers (0)
Related Questions
- How to issue access token for both userinfo endpoint and resource server call with node-oidc-provider
- How to change access token format using node oidc provider
- [node oidc provider]: Authorization code flow
- node-oidc-provider access token format
- How to get access token and refresh token in the /token endpoint using OIDC provider
- How to get the Authorization code in the node OIDC provider
- Access token doesn't contain 'sub' claim in access token after call to RequestClientCredentialsTokenAsync
- The 'sub' claim value is different between Access and Id tokens
- What is in the sub and oid claims when getting client_credentials tokens from the Azure AD OAuth v2 token endpoint?
- oidc-client authentication failure: sub from user info endpoint does not match sub in access_token