goauthentik / goauthentik/authentik

Add claim to only ID Token

Open
#11,073 2 comments 1 reaction 0 assignees View on GitHub
question
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

**Describe your question/**
I am trying to implement avatar support using a custom attribute as described in [System Setting](https://docs.goauthentik.io/docs/core/settings). I've updated my backend to allow setting this avatar by saving base64 encoded images in this custom attribute. However, it appears this attribute isn't automatically added to the ID token. Thus, I've setup a property mapping and added the scope to my provider. This works, however, the (1mb) base64 encoded photo is now included in both the ID Token and Access token. Other IdPs allow you to specify which token you'd like the claim to be present on as it's pretty inefficient to pass such as large token to backends for user authn/z when that claim is only needed on the UI side for me. Is this possible in Authentik?

**Version and Deployment (please complete the following information):**

- authentik version: 2024.6.4
- Deployment: helm

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.