[JIRA] (JOIDC-100) Releasing IAT, EXP and NBF claims from the UserInfo endpoint

[Simone Avogadro (Jira)]

Simone Avogadro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A60a84ee1-4961-471b-99d8-f67c05e24403 ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiOGFmMjZjODM2NDVkNDk4Yzg5MTYxYjAwNWFhNThjNTEiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/JOIDC-100?atlOrigin=eyJpIjoiOGFmMjZjODM2NDVkNDk4Yzg5MTYxYjAwNWFhNThjNTEiLCJwIjoiaiJ9 ) JOIDC-100 ( https://shibboleth.atlassian.net/browse/JOIDC-100?atlOrigin=eyJpIjoiOGFmMjZjODM2NDVkNDk4Yzg5MTYxYjAwNWFhNThjNTEiLCJwIjoiaiJ9 ) Releasing IAT, EXP and NBF claims from the UserInfo endpoint ( https://shibboleth.atlassian.net/browse/JOIDC-100?atlOrigin=eyJpIjoiOGFmMjZjODM2NDVkNDk4Yzg5MTYxYjAwNWFhNThjNTEiLCJwIjoiaiJ9 )

Issue Type: Improvement Affects Versions: 3.1.0 Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Components: UserInfo Endpoint Created: 22/Apr/22 10:16 AM Priority: Trivial Reporter: Simone Avogadro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A60a84ee1-4961-471b-99d8-f67c05e24403 )

We need to be able to add the following three claims to the UserInfo endpoint:

* iat
*  {{ nbf  }} (which must be exactly equal to iat)
* exp

with other claims (namely jti ) we simply defined the claims (attributes) and these got released from the endpoint, on the contrary for the above three this does not seem to work: we suspect that given the well known semanthincs there might be something on the UserInfo endpoint which is automatically filtering out these claims

we’d like to be able to override this filtering and be able to release these three too

( https://shibboleth.atlassian.net/browse/JOIDC-100#add-comment?atlOrigin=eyJpIjoiOGFmMjZjODM2NDVkNDk4Yzg5MTYxYjAwNWFhNThjNTEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-100#add-comment?atlOrigin=eyJpIjoiOGFmMjZjODM2NDVkNDk4Yzg5MTYxYjAwNWFhNThjNTEiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100198- sha1:943baf4 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220422/a74b23f1/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-f10ceb21-ebc5-4cb9-8899-01cd95280da7
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220422/a74b23f1/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-a2358564-6bfd-41ec-b958-34c6b2ca1729
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220422/a74b23f1/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-5d09f2ad-6bef-49c6-88a5-f515399d7078
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220422/a74b23f1/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-39877410-b281-463d-a6ba-56bffcdca445
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220422/a74b23f1/attachment-0007.png>