git.iko.soy/typeable/oauth2-proxy
on master help sign in
Fall back to using sub if email is none (as in PR #57)
58b06ceBrian Van Klaveren
oauthproxy.go+2−1
compare with master
unifiedsplit
@@ -901,6 +901,7 @@ func (p *OAuthProxy) GetJwtSession(req *http.Request) (*sessionsapi.SessionState
901 }
901 }
902
902
903 var claims struct {
903 var claims struct {
904+ Subject string `json:"sub"`
904 Email string `json:"email"`
905 Email string `json:"email"`
905 Verified *bool `json:"email_verified"`
906 Verified *bool `json:"email_verified"`
906 }
907 }
@@ -910,7 +911,7 @@ func (p *OAuthProxy) GetJwtSession(req *http.Request) (*sessionsapi.SessionState
910 }
911 }
911
912
912 if claims.Email == "" {
913 if claims.Email == "" {
913− return nil, fmt.Errorf("id_token did not contain an email")
914+ claims.Email = claims.Subject
914 }
915 }
915
916
916 if claims.Verified != nil && !*claims.Verified {
917 if claims.Verified != nil && !*claims.Verified {