diff --git a/authentik/providers/oauth2/api.py b/authentik/providers/oauth2/api.py index 5f79b081c..443a4da19 100644 --- a/authentik/providers/oauth2/api.py +++ b/authentik/providers/oauth2/api.py @@ -21,6 +21,7 @@ class OAuth2ProviderSerializer(ModelSerializer, MetaNameSerializer): "client_secret", "token_validity", "response_type", + "include_claims_in_id_token", "jwt_alg", "rsa_key", "redirect_uris", diff --git a/authentik/providers/oauth2/forms.py b/authentik/providers/oauth2/forms.py index 071b6434a..18d9bbfcf 100644 --- a/authentik/providers/oauth2/forms.py +++ b/authentik/providers/oauth2/forms.py @@ -55,6 +55,7 @@ class OAuth2ProviderForm(forms.ModelForm): "client_secret", "response_type", "token_validity", + "include_claims_in_id_token", "jwt_alg", "rsa_key", "redirect_uris", diff --git a/swagger.yaml b/swagger.yaml index 35ab9c741..d5c7970b5 100755 --- a/swagger.yaml +++ b/swagger.yaml @@ -7847,6 +7847,11 @@ definitions: - code token - code id_token - code id_token token + include_claims_in_id_token: + title: Include claims in id_token + description: Include User claims from scopes in the id_token, for applications + that don't access the userinfo endpoint. + type: boolean jwt_alg: title: JWT Algorithm description: Algorithm used to sign the JWT Token