openid: fix username-claim fallback

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2021-11-25 07:57:10 +01:00
parent ebb14277f1
commit aa71c0f0f6

View File

@ -174,7 +174,8 @@ __PACKAGE__->register_method ({
my $subject = $info->{'sub'};
my $unique_name;
if (defined(my $user_attr = $config->{'username-claim'})) {
my $user_attr = $config->{'username-claim'} // 'sub';
if (defined($info->{$user_attr})) {
$unique_name = $info->{$user_attr};
} elsif ($user_attr eq 'subject') { # stay compat with old versions
@ -185,8 +186,7 @@ __PACKAGE__->register_method ({
$unique_name = $username;
} else {
# neither the attr nor fallback are defined in info..
die "missing configured claim '$user_attr'\n";
}
die "missing configured claim '$user_attr' in returned info object\n";
}
my $username = "${unique_name}\@${realm}";