Add hook for access token JWT payload (#2419)

2021-02-01 16:57:46 +01:00 · 2021-02-01 16:57:46 +01:00 · 1cd7dd3d2c
commit 1cd7dd3d2c
parent 857a336da2
1 changed files with 5 additions and 0 deletions
--- a/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Lib/OpenIDConnect.pm
+++ b/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Lib/OpenIDConnect.pm
@ -788,6 +788,11 @@ sub maybeJWT {
            $access_token_payload->{sub} = $claims->{sub};
        }

+        # Call hook to let the user modify payload
+        my $h = $self->p->processHook( $req, 'oidcGenerateAccessToken',
+            $access_token_payload, $rp );
+        return undef if ( $h != PE_OK );
+
        # Get signature algorithm
        my $alg = $self->conf->{oidcRPMetaDataOptions}->{$rp}
          ->{oidcRPMetaDataOptionsAccessTokenSignAlg} || "RS256";