[JIRA] (JOIDC-104) Support to block releasing some claims within the ID_Token

[Simone Avogadro (Jira)]

Simone Avogadro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A60a84ee1-4961-471b-99d8-f67c05e24403 ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiMDY2MWZkMTZlYTQxNDkwZGI1OGU5NDI3M2IxZjZkN2UiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/JOIDC-104?atlOrigin=eyJpIjoiMDY2MWZkMTZlYTQxNDkwZGI1OGU5NDI3M2IxZjZkN2UiLCJwIjoiaiJ9 ) JOIDC-104 ( https://shibboleth.atlassian.net/browse/JOIDC-104?atlOrigin=eyJpIjoiMDY2MWZkMTZlYTQxNDkwZGI1OGU5NDI3M2IxZjZkN2UiLCJwIjoiaiJ9 ) Support to block releasing some claims within the ID_Token ( https://shibboleth.atlassian.net/browse/JOIDC-104?atlOrigin=eyJpIjoiMDY2MWZkMTZlYTQxNDkwZGI1OGU5NDI3M2IxZjZkN2UiLCJwIjoiaiJ9 )

Issue Type: Improvement Affects Versions: 3.1.1 Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Components: Token Endpoint Created: 10/May/22 6:34 AM Priority: Trivial Reporter: Simone Avogadro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A60a84ee1-4961-471b-99d8-f67c05e24403 )

We’ve a customer which needs to limit the claims which can be requested inside the ID_Token, thus we need some entrypoint/property to do that.
One solution could be a property like idp.oidc.deniedUserInfoAttributes (e.g. idp.oidc.deniedIDTokenAttributes )

Another more general option could be to provide an entry point which allows the deployer to manipulate the claims before encoding etc… so to allow a general java-based logic to be applied and to maniuplate the claims

( https://shibboleth.atlassian.net/browse/JOIDC-104#add-comment?atlOrigin=eyJpIjoiMDY2MWZkMTZlYTQxNDkwZGI1OGU5NDI3M2IxZjZkN2UiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-104#add-comment?atlOrigin=eyJpIjoiMDY2MWZkMTZlYTQxNDkwZGI1OGU5NDI3M2IxZjZkN2UiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100198- sha1:3c518b7 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220510/2d243ddf/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-3760e1cb-de27-4823-85dd-69a72df598b8
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220510/2d243ddf/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-ce191834-0e30-4b53-b722-ed55fb90662e
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220510/2d243ddf/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-d8032a3d-235d-469f-87f9-adf7de806389
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220510/2d243ddf/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-67ba9b21-2c13-4e72-be06-4e15fee5229e
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220510/2d243ddf/attachment-0007.png>