Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

4.x: UPN claim should be optional (#5151) #9640

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

Captain1653
Copy link
Contributor

@Captain1653 Captain1653 commented Jan 8, 2025

Description

Fixes #5151

Original PR is here.

Code is the same, but I have already signed OCA (my little help :) ).

Maybe, some changes in the docs should be done, but I'm not sure. I've read this doc, but I didn't find any mentions.

@oracle-contributor-agreement oracle-contributor-agreement bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Jan 8, 2025
*/
public Optional<String> userPrincipal() {
return userPrincipal;
return userPrincipal
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this causes inconsistency between the runtime model and the JWT which it generates. From my point of view this method should return only the set userPrincipal value and on places where this is used (and functionality based on the MP spec needs to be present), there might be those falbacks added. This causes backwards incompatible functionality, but on the other hand, I see this rather as a bug fix, so it should not be a problem.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Any other opinions about this from others?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
OCA Verified All contributors have signed the Oracle Contributor Agreement.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

unwanted "upd" claim in JWT - Oracle IDCS/IAM Domains having problems
2 participants