OIDCIdTokenContext?

[Scott Koranda]

>     Any chance someone has already written code that can be shared for an
>     OIDCIdTokenContext class?
> 
> 
> I apologize in advance for answering a question with a question, 

No apology necessary.

> but what's
> your use case for needing one? It's more than idle curiosity. I'm very
> interested in getting OIDC support into v3 in some fashion in the future, and
> use cases would be helpful to guide that effort.

I have a client that wants to deploy the Shibboleth IdPv3 and
use the Google OIDC flow for authentication. Essentially they
want to operate their own Google-to-SAML gateway for their own
use case.

I asked because I have heard about various people working on
OIDC functionality and thought there might be code I could
quickly reuse.

In the meantime I just went ahead and wrote GoogleIdPrincipal,
GoogleIdTokenContext, ExtractGoogleIdTokenFromFormRequest,
and ValidateGoogleIdToken classes. I decided to be specific
for now (GoogleIdToken) even though the Google ID token
can/should be a OIDC-compliant ID token.

The flow works. I still need to get attributes like email and
displayName passed from the ID token in the authentication
flow to the attribute machinery. That is up next (I sent a
note about that a few weeks ago and Scott C pointed me in the
direction to go).

I will be asking the client to release the code in case anyone
might find it useful.

Thanks,

Scott K