diff --git a/CHANGELOG.md b/CHANGELOG.md index 52814d274b9..aaa05d41316 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,7 +4,7 @@ **Table of Contents** -- [0.0.0 (2023-08-10)](#000-2023-08-10) +- [0.0.0 (2023-08-11)](#000-2023-08-11) - [Bug Fixes](#bug-fixes) - [Features](#features) - [2.2.0-pre.0 (2023-06-22)](#220-pre0-2023-06-22) @@ -698,7 +698,7 @@ -# [0.0.0](https://github.com/ory/hydra/compare/v2.2.0-pre.0...v0.0.0) (2023-08-10) +# [0.0.0](https://github.com/ory/hydra/compare/v2.2.0-pre.0...v0.0.0) (2023-08-11) ### Bug Fixes @@ -725,6 +725,22 @@ * Allow additional SQL migrations ([#3587](https://github.com/ory/hydra/issues/3587)) ([8900cbb](https://github.com/ory/hydra/commit/8900cbb770d6f39a5c3322fce488675ca6d0138a)) * Allow Go migrations ([#3602](https://github.com/ory/hydra/issues/3602)) ([8eed306](https://github.com/ory/hydra/commit/8eed306800fa330a1cda752dbb11ddf09faf25ad)) +* Allow to disable claim mirroring ([#3563](https://github.com/ory/hydra/issues/3563)) ([c72a316](https://github.com/ory/hydra/commit/c72a31641ee79f090a2ac1b64a276be58312b2ee)): + + This PR introduces another config option called `oauth2:mirror_top_level_claims` which may be used to disable the mirroring of custom claims into the `ext` claim of the jwt. + This new config option is an opt-in. If unused the behavior remains as-is to ensure backwards compatibility. + + Example: + + ```yaml + oauth2: + allowed_top_level_claims: + - test_claim + mirror_top_level_claims: false # -> this will prevent test_claim to be mirrored within ext + ``` + + Closes https://github.com/ory/hydra/issues/3348 + * Bump fosite and add some more tracing ([0b56f53](https://github.com/ory/hydra/commit/0b56f53a491e165f68a53f013989328ce86928ba)) * **cmd:** Add route that redirects to the auth code url ([4db6416](https://github.com/ory/hydra/commit/4db64161699e4301c003b2787baecae22c912c17)) * Parallel generation of JSON web key set ([#3561](https://github.com/ory/hydra/issues/3561)) ([5bd9002](https://github.com/ory/hydra/commit/5bd9002db7baa2fe2c2529fee38825d66a68991f))