acr claim not available in id tokens

By: Rui Engana Account Admin 14 Aug 2020 at 3:58 p.m. CDT

4 Responses
Rui Engana gravatar
The id_tokens issued by Gluu don't don't have ACR claim. This happens with id_tokens both in Authorize responses and Token responses. Decoded ID Token from oxAuth ``` { "at_hash": "7zfqM8hLcRazCLpf-f5OEg", "aud": "a638ab4a-687d-4e09-85ff-f545bdbc0ef5", "c_hash": "AAM1dSx4Sah8GPMX3Dlfuw", "sub": "OQ_2Ja6R8pyCWIRG5_iZXCscerwAmkdvWp1yk4HIjhI", "auth_time": 1597426704, "iss": "https://redacted", "exp": 1597430306, "iat": 1597426706, "nonce": "b393136993637c8759c68859f1e189370714573468fbcd2e985274bd1a5ebf87", "sid": "2ddcf4f5-c4c1-4a97-a82d-f6dabe5d4482", "oxOpenIDConnectVersion": "openidconnect-1.0" } ```
Rhel 8.0
closed

Answers

By Michael Schwartz Account Admin 14 Aug 2020 at 4:05 p.m. CDT

Copy
Michael Schwartz gravatar
This is a bug. We will push a fix for 4.2.1

By Yuriy Zabrovarnyy staff 17 Aug 2020 at 8:09 a.m. CDT

Copy
Yuriy Zabrovarnyy gravatar
`acr` claim presence for ID Token will be fixed in 4.2.1 within https://github.com/GluuFederation/oxAuth/issues/1446

By Yuriy Zabrovarnyy staff 18 Aug 2020 at 3 a.m. CDT

Copy
Yuriy Zabrovarnyy gravatar
Issue is fixed, latest 4.2.1 war file can be found here: https://ox.gluu.org/maven/org/gluu/oxauth-server/4.2.1-SNAPSHOT/oxauth-server-4.2.1-SNAPSHOT.war Thanks, Yuriy Z

By Yuriy Zabrovarnyy staff 19 Aug 2020 at 2:33 a.m. CDT

Copy
Yuriy Zabrovarnyy gravatar
Closing this ticket as solved, please reopen if needed.

Post an answer