Skip to content

Default retrieveUserInfo for OidcUserService & OidcReactiveOAuth2UserService are inconsistent #17625

@rwinch

Description

@rwinch

By default OidcReactiveOAuth2UserService uses OidcUserRequestUtils::shouldRetrieveUserInfo but OidcUserService uses this::retrieveUserInfo. The logic between these two methods are not consistent and we need to update the logic in retrieveUserInfo for OidcUserService & OidcReactiveOAuth2UserService to be consistent.

We need to:

  1. Ensure that the logic in OidcUserRequestUtils::shouldRetrieveUserInfo is correct (since it isn't consistent with OidcUserService::retrieveUserInfo
  2. Update the default for OidcUserService to use OidcUserService::retreiveUserInfo.

@jgrandja

Metadata

Metadata

Assignees

No one assigned

    Labels

    in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)type: bugA general bug

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions