Skip to content

Commit de52a30

Browse files
smalihaider-daasic00kiemon5ter
authored andcommittedNov 6, 2024
For the stateless flow, retrieve the extra_id_token_claims from the auth_code in the request
1 parent edb7397 commit de52a30

File tree

1 file changed

+4
-7
lines changed

1 file changed

+4
-7
lines changed
 

‎src/pyop/provider.py

+4-7
Original file line numberDiff line numberDiff line change
@@ -446,16 +446,13 @@ def _do_code_exchange(self, request, # type: Dict[str, str]
446446
if refresh_token is not None:
447447
response['refresh_token'] = refresh_token
448448

449-
if extra_id_token_claims is None:
450-
extra_id_token_claims = {}
451-
elif callable(extra_id_token_claims):
452-
if self.stateless:
453-
extra_id_token_claims = extra_id_token_claims(sub, authentication_request['client_id'])
454-
else:
455-
extra_id_token_claims = extra_id_token_claims(user_id, authentication_request['client_id'])
449+
extra_id_token_claims = {}
456450
if self.stateless:
457451
extra_id_token_claims_in_code = self.authz_state.get_extra_id_token_claims_for_code(token_request['code'])
458452
extra_id_token_claims.update(extra_id_token_claims_in_code)
453+
elif callable(extra_id_token_claims):
454+
extra_id_token_claims = extra_id_token_claims(user_id, authentication_request['client_id'])
455+
459456
requested_claims = self._get_requested_claims_in(authentication_request, 'id_token')
460457
if self.stateless:
461458
user_info = self.authz_state.get_user_info_for_code(token_request['code'])

0 commit comments

Comments
 (0)
Please sign in to comment.