From: Jan W. <J.W...@cw...> - 2016-12-20 14:45:50
|
Hi Krzysztof, On 15/12/16 16:12, Krzysztof Benedyczak wrote: >> What am I missing? > > Context address of the endpoint is root part of the path (which you > control) - /oauth2-as in your case. Under it there are typically some > fixed paths which are internal detail of the endpoint in question. > Docs provide info on those paths. > > So in this case you need to append .../oauth2-authz in the request. path. I see how it works now. The docs give "Endpoint type", you can look that up in conf/unityServer.conf and then you add the "exposed paths". Great. I get through the `code' flow now. But ... Despite I ask for the `profile` scope, I configured that and set cn and email for the test user, I get no scope attributes :( I get from POST /oauth2/token: - access_token: ... - token_type: "Bearer" >From GET /oauth2/userinfo: - sub: ... If I login with google, the token endpoint gives me an attribute token_id, which is a JWT string that gives me the scope attributes. Almost there (I think) ... Thanks --- Jan P.s. Possibly related, I added the email and cn attributes to the user through the admin/admin interface. After login as the test user I had expected to see these attributes, but nope. Is that expected? > > HTH, > Krzysztof > > > |