git.iko.soy/typeable/oauth2-proxy
on master help sign in
Do not infer username from email
commit5a50f6223f33d2e68ea4b23e9ffae977d8423bbe authorBrian Van Klaveren <bvan@slac.stanford.edu> dateMon 17 Jun 2019, 12:58 (7 years ago) parent100f126
1 file changed+1−2
oauthproxy.go+1−2
oauthproxy.go+1−2
@@ -917,7 +917,6 @@ func (p *OAuthProxy) GetJwtSession(req *http.Request) (*sessionsapi.SessionState
917917 if claims.Verified != nil && !*claims.Verified {
918918 return nil, fmt.Errorf("email in id_token (%s) isn't verified", claims.Email)
919919 }
920− user := strings.Split(claims.Email, "@")[0]
921920
922921 session = &sessionsapi.SessionState{
923922 AccessToken: rawBearerToken,
@@ -925,7 +924,7 @@ func (p *OAuthProxy) GetJwtSession(req *http.Request) (*sessionsapi.SessionState
925924 RefreshToken: "",
926925 ExpiresOn: bearerToken.Expiry,
927926 Email: claims.Email,
928− User: user,
927+ User: claims.Email,
929928 }
930929 return session, nil
931930 }