Skip to content

fix: tolerate string amr claims from external providers#855

Open
Catgroove wants to merge 1 commit intozitadel:mainfrom
Catgroove:fix/tolerate-string-amr
Open

fix: tolerate string amr claims from external providers#855
Catgroove wants to merge 1 commit intozitadel:mainfrom
Catgroove:fix/tolerate-string-amr

Conversation

@Catgroove
Copy link
Copy Markdown

Summary

  • accept non-compliant amr values when providers return a single string instead of an array
  • normalize amr to []string for ID token, access token, and introspection unmarshalling without changing the public field types
  • add focused tests for string and array amr values during JSON unmarshalling

Testing

  • go test ./pkg/oidc
  • go test ./... (currently fails in unrelated existing example/server route tests in pkg/client/rp and pkg/op under Go 1.26 in this environment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

2 participants