aws Cognito JWT Token claim 'cognito:groups' tranform to claim 'groups'

[aerodc]

Hello Guys,

Do you know how to tell smallrye-jwt to use claim 'cognito:groups' as standard claim 'groups'?

Thanks a lot

[sberyozkin]

@aerodc Can you type a sample JWT JSON please ?

[aerodc]

@sberyozkin thanks for your quick response,
the sample JWT Json is aws cognito jwt token like:

{
  "sub": "bbbbbbbb",
  "aud": "xxxxx",
  "cognito:groups": [
    "group1"
  ],
  "email_verified": true,
  "event_id": "ccccccccc",
  "token_use": "id",
  "auth_time": 1563193576,
  "iss": "https://cognito-idp.eu-central-1.amazonaws.com/eu-central-CCCCC",
  "cognito:username": "tester",
  "exp": 12233444,
  "iat": 12233444,
  "email": "test@gmail.com"
}

[sberyozkin]

@aerodc sure see this property. Can you confirm it works please ?

[aerodc]

@sberyozkin
should I put it like this?

smallrye.jwt.path.groups=payload/'cognito:groups'

but I got errors message

No claim exists at the path payload/'cognito:groups' at segment payload
Claim value at the path payload/'cognito:groups' is not an array

[sberyozkin]

@aerodc just

smallrye.jwt.path.groups=cognito:groups

[aerodc]

@sberyozkin thanks a lot and it works!

[sberyozkin]

@aerodc np, thanks for your question. Please consider asking at the Smallrye forum or at the Quarkus/Thorntail lists if you work with either of these projects