How to add additional claim into id_token? #6219

nhontran created one year ago

ABP Framework version: v5.2.2
UI Type: Angular
Database System: EF Core (SQL Server)
Auth Server Separated (for Angular): yes

Hi, we are using Identity Server 4 and have a custom claim called 'institution_id,' which we have included in the access token by adding it to the ApiResourcesClaims.

However, this claim does not appear in the id_token, and we need it to be included. Any customization needed to achieve this?

Your help would be greatly appreciated.

maliming created one year ago

Support Team Fullstack Developer

Please share your identity server config. eg Client, API Scope ,Identity Resource

Thanks.

nhontran created one year ago

Client:

Api Resources:

Api scopes:

Identity Resources:

Please let me know if you require any further info.

Thanks

maliming created one year ago

Support Team Fullstack Developer

Please share the code of seeding the identity server's configuration.

nhontran created one year ago

Hi @maliming,

I have shared you the source code via email.

maliming created one year ago

Support Team Fullstack Developer

You can add a new Identity Resouce named institution_id.

Add the institution_id to the request's scopes. options.Scope.Add("institution_id");

[UnitOfWork]
public virtual async Task SeedAsync(DataSeedContext context)
{
    using (_currentTenant.Change(context?.TenantId))
    {
        await _identityResourceDataSeeder.CreateStandardResourcesAsync();

        if (!await _identityResourceRepository.CheckNameExistAsync(SHDPClaimTypes.InstitutionId))
        {
            var institutionIdIdentityResource = new IdentityResource(_guidGenerator.Create(), SHDPClaimTypes.InstitutionId);
            institutionIdIdentityResource.AddUserClaim(SHDPClaimTypes.InstitutionId);
            await _identityResourceRepository.InsertAsync(institutionIdIdentityResource);
            if (await _claimTypeRepository.AnyAsync(SHDPClaimTypes.InstitutionId))
            {
                await _claimTypeRepository.InsertAsync(
                    new IdentityClaimType(
                        _guidGenerator.Create(),
                        SHDPClaimTypes.InstitutionId,
                        isStatic: true
                    )
                );
            }
        }

        await CreateClaimTypesAsync();
        await CreateApiResourcesAsync();
        await CreateClientsAsync();
    }
}

var commonScopes = new[]
{
    "email",
    "openid",
    "profile",
    "role",
    "phone",
    "address",
    "DigitalPlatform",
    "institution_id"
};