Skip to content

[BUG] New OIDC user with 'none' fields #882

@Verestchagin

Description

@Verestchagin

Describe the bug
incorrect processing of the oidc response. During the first authentication (when the user does not exist), a 'None' user is created if, for example, the email parameter is unavailable.

To Reproduce
Steps to reproduce the behavior:
1)Connect the OIDC. I use Keycloak for these purposes.
2)restrict the use of the email field in a specific client in the IDP.
3) When I try to authenticate, I get user None, although I should get an error. the IRIS_AUTHENTICATION_CREATE_USER_IF_NOT_EXIST parameter is configured in .env=True
4)The same situation was when I tested the IDC_SCOPES,OIDC_MAPPING_USERNAME, and OIDC_MAPPING_EMAIL parameters.

Expected behavior
It is necessary to receive a message that the user cannot be created because there are no required fields.

Screenshots

Image

Desktop (please complete the following information):

  • OS: oracle 9.5 server, macos client
  • Browser: Firefox

Additional context

Please let us know if you have described.

Also regarding the issue of request processing. I still haven't been able to configure the system so that the login field contains username, not email.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions