Anyone with an answer for this behavior?
I can now release attributes but only under the field "attributes".
Anything i am missing to be able to release claims in the format:
{
"email": "inf...@gmail.com <https://groups.google.com/>",
"given_name": "test",
"sub": "test",
"service": "client_id",
"auth_time": 1598017095,
"id": "test",
"client_id": "client_id"
}
Στις Παρασκευή, 21 Αυγούστου 2020 στις 4:48:44 μ.μ. UTC+3, ο χρήστης
Nikolas Stylianides έγραψε:
> Hi Jerome. Thank you for the response.
> I am a little bit confused. What to define?
> When it comes to get the user info, CAS Debugger it reports:
>
> I have been able to release attributes in the attribute claim
>
> {
> "sub": "test",
> "service": "client_id",
> "auth_time": 1598017095,
> "attributes": {
> "email": "inf...@gmail.com",
> "profile": "test"
> },
> "id": "test",
> "client_id": "client_id"
> }
>
> by enabling:
>
> cas.authn.attribute-repository.ldap[0].attributes.cn=profile
> cas.authn.attribute-repository.ldap[0].attributes.mail=email
>
> But still i cannot release the CLAIMS for the requested scopes (email,
> profile)
>
> Thank you in advance
>
>
>
>
>
>
>
> On Fri, Aug 21, 2020 at 12:36 PM Jérôme Steve <jerome...@gmail.com> wrote:
>
>> Hi,
>>
>> In cas OIDC claims values come from attribute repositories.
>> So you have to define it to retrieved your attributes value.
>> And after you can map it to the OIDC claims.
>>
>> Jérôme
>>
>> Le ven. 21 août 2020 à 09:39, Nikolas Stylianides <nstyli...@gmail.com>
>> a écrit :
>>
>>> when i use the PASSWORD grant_type and then use the return token to
>>> fetch user information from oidc/profile this is what i get.
>>>
>>> {
>>> "sub": "aUserName",
>>> "service": "client_id",
>>> "auth_time": 1597989795,
>>> "attributes": {},
>>> "id": " aUserName ",
>>> "client_id": "client_id"
>>> }
>>>
>>> Any ideas why i have no claims in the return JSON?
>>> Maybe the same happens with the AUTHORIZATION_CODE grant_type?
>>>
>>>
>>>
>>> Στις Πέμπτη, 20 Αυγούστου 2020 στις 5:37:33 μ.μ. UTC+3, ο χρήστης
>>> Nikolas Stylianides έγραψε:
>>>
>>>> Hi there.
>>>> Another strange behavior is the following.
>>>> I am setting my Moodle to OIDC and the procedure goes well. Once i
>>>> "Allow" the the claims it does not get any user info.
>>>>
>>>> CAS Debugger reports: <No person records were fetched from attribute
>>>> repositories for [{username=c44c3fc514202ac9a8cc5cf6437c1c21}]>
>>>>
>>>> which username is actually client_id
>>>>
>>>>
>>>>
>>>> On Wed, Aug 19, 2020 at 6:35 PM Nikolas Stylianides <
>>>> nstyli...@gmail.com> wrote:
>>>>
>>>>> Hi there.
>>>>> I have manged to setup the OpenID Connect protocol.
>>>>> The issue i am facing is in the last steps where the Attributes should
>>>>> be released to the service but they are not.
>>>>> I am getting on the logs of CAS the following: WARN
>>>>> [org.apereo.cas.authentication.attribute.PrincipalAttributeRepositoryFetcher]
>>>>>
>>>>> - <No person records were fetched from attribute repositories for ... >
>>>>>
>>>>> Any advice?
>>>>>
>>>>> My service has been defined as follows:
>>>>> Service is Moodle
>>>>>
>>>>> {
>>>>> "@class" : "org.apereo.cas.services.OidcRegisteredService",
>>>>> "serviceId" : "https://myservice.domain/admin/oauth2callback.php";,
>>>>> "name" : "oidc",
>>>>> "id" : 102,
>>>>> "clientId": "...",
>>>>> "clientSecret": "...",
>>>>> "scopes": [ "java.util.HashSet",
>>>>> [ "openid", "profile", "email", "address", "phone",
>>>>> "offline_access", "displayName" ]
>>>>> ],
>>>>> "supportedGrantTypes":[ "java.util.HashSet",
>>>>>
>>>>> ["AUTHORIZATION_CODE","CLIENT_CREDENTIALS","PASSWORD","REFRESH_TOKEN"]
>>>>> ],
>>>>> "supportedResponseTypes":[ "java.util.HashSet", [ "code" ] ],
>>>>> "theme": "apereo",
>>>>> "description" : "This service definition authorizes all application
>>>>> urls that support HTTPS and IMAPS protocols.",
>>>>> "evaluationOrder" : 10000,
>>>>> "attributeReleasePolicy" : {
>>>>> "@class" :
>>>>> "org.apereo.cas.services.ReturnAllAttributeReleasePolicy"
>>>>> },
>>>>> "accessStrategy" : {
>>>>> "@class" :
>>>>> "org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy",
>>>>> "enabled" : true,
>>>>> "ssoEnabled" : true
>>>>> }
>>>>> }
>>>>>
>>>>> Thank you in advance.
>>>>>
>>>>> --
>>>>> Δρ. Νικόλας Στυλιανίδης
>>>>> Ηλεκτρολόγος Μηχανικός και Μηχ. Υπολογιστών
>>>>>
>>>>> Nikolas Stylianides, Dr.
>>>>> Dr. Eng. in Electrical & Computer Engineering
>>>>>
>>>>> Contacts
>>>>> -------------
>>>>> Mobile Tel.: +35796741315 <+357%2096%20741315>
>>>>> Email: nstyli...@leafnet.com.cy, nstyli...@gmail.com
>>>>> Skype: nicostyl
>>>>>
>>>>> Affilication
>>>>> ---------------
>>>>> LEAF NET LTD: Research & Development
>>>>> Open University of Cyprus: Research Associate, APPLIED HEALTH
>>>>> INFORMATICS Master Programme Academic Board Member
>>>>>
>>>>>
>>>>> Tο λακωνίζειν εστί φιλοσοφείν / Μηδέν Άγαν - Χίλων ο Λακεδαιμόνιος:
>>>>>
>>>>> Brevity is the soul of wit - Shakespeare William (Hamlet)
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>
>>>> --
>>>> Δρ. Νικόλας Στυλιανίδης
>>>> Ηλεκτρολόγος Μηχανικός και Μηχ. Υπολογιστών
>>>>
>>>> Nikolas Stylianides, Dr.
>>>> Dr. Eng. in Electrical & Computer Engineering
>>>>
>>>> Contacts
>>>> -------------
>>>> Mobile Tel.: +35796741315 <+357%2096%20741315>
>>>> Email: nstyli...@leafnet.com.cy, nstyli...@gmail.com
>>>> Skype: nicostyl
>>>>
>>>> Affilication
>>>> ---------------
>>>> LEAF NET LTD: Research & Development
>>>> Open University of Cyprus: Research Associate, APPLIED HEALTH
>>>> INFORMATICS Master Programme Academic Board Member
>>>>
>>>>
>>>> Tο λακωνίζειν εστί φιλοσοφείν / Μηδέν Άγαν - Χίλων ο Λακεδαιμόνιος:
>>>>
>>>> Brevity is the soul of wit - Shakespeare William (Hamlet)
>>>>
>>>>
>>>>
>>>>
>>>> --
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to cas-user+u...@apereo.org.
>>> To view this discussion on the web visit
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/e9ce28d5-72f9-4229-9dcc-51ad9a8e1150n%40apereo.org
>>>
>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/e9ce28d5-72f9-4229-9dcc-51ad9a8e1150n%40apereo.org?utm_medium=email&utm_source=footer>
>>> .
>>>
>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to cas-user+u...@apereo.org.
>>
> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD6Knbz0u4iNgJL8MA%2Bq9_c7NFF92VpqgGh-zR_WRbdz8H0Z-Q%40mail.gmail.com
>>
>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD6Knbz0u4iNgJL8MA%2Bq9_c7NFF92VpqgGh-zR_WRbdz8H0Z-Q%40mail.gmail.com?utm_medium=email&utm_source=footer>
>> .
>>
>
>
> --
> Δρ. Νικόλας Στυλιανίδης
> Ηλεκτρολόγος Μηχανικός και Μηχ. Υπολογιστών
>
> Nikolas Stylianides, Dr.
> Dr. Eng. in Electrical & Computer Engineering
>
> Contacts
> -------------
> Mobile Tel.: +35796741315 <+357%2096%20741315>
> Email: nstyli...@leafnet.com.cy, nstyli...@gmail.com
> Skype: nicostyl
>
> Affilication
> ---------------
> LEAF NET LTD: Research & Development
> Open University of Cyprus: Research Associate, APPLIED HEALTH INFORMATICS
> Master Programme Academic Board Member
>
>
> Tο λακωνίζειν εστί φιλοσοφείν / Μηδέν Άγαν - Χίλων ο Λακεδαιμόνιος:
>
> Brevity is the soul of wit - Shakespeare William (Hamlet)
>
>
>
>
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/f3be7f46-156e-4d64-a481-cc39eb7d2a48n%40apereo.org.
