GoogleCloudPlatform / GoogleCloudPlatform/asm-user-auth

Custom Attribute mapping doesnt work for Nested Claims in ID Token.

Open
#24 6 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
9
Forks
8
PR merge metrics
No merged PRs in 30d

Description

If i have the ID token in the following format - i am not able to access the resource_access field.
{
"resource_access": {
"my_resource": {
"roles": [
"my_roles"
]
}
}

Here is my configuration for custom claim mapping :

spec:
authentication:
oidc:
attributeMapping:
resource_access: "assertion.resource_access"

Here is the error i am getting in the log :
Unable to process the request: The CEL expression for 'resource_access' did not return a string data type.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.