NewDefaultSession's SetSubject should set IDTokenClaims as well
mitar opened this issue · comments
Mitar commented
Preflight checklist
- I could not find a solution in the existing issues, docs, nor discussions.
- I agree to follow this project's Code of Conduct.
- I have read and am following this repository's Contribution Guidelines.
- I have joined the Ory Community Slack.
- I am signed up to the Ory Security Patch Newsletter.
Ory Network Project
No response
Describe your problem
openid.Session
requires subject to be set. openid.NewDefaultSession()
returns an openid.DefaultSession
without subject set. It provides SetSubject
to set the subject, but calling it still does not make the session have subject. It has to be set in IDTokenClaims
as well.
Describe your ideal solution
session := openid.NewDefaultSession()
session.SetSubject(subject)
Should be enough.
Workarounds or alternatives
One currently has to set it manually:
session := openid.NewDefaultSession()
session.SetSubject(subject)
session.IDTokenClaims().Subject = subject
Version
v0.46.1-0.20240213123944-f38352921f22
Additional Context
No response