[keycloak-user] Passing information from custom Authenticator to a Token

[Король Илья]

First thing that came to my head is to populate required data to 
attributes of UserModel and use mappers to map attr to AT claim, but 
your way also look interesting and i don't see any problems here.


21.04.2017 8:32, Thomas Darimont пишет:
> Hello group,
>
> I need to pass some information form a custom Authenticator to the
> IDToken/AccessToken.
> One way I found to do that is by using UserSessionNotes and a "User Session
> Note"
> Protocol Mapper defined in a client template which is shared by all clients.
>
> public void authenticate(AuthenticationFlowContext context) {
>     ...
>
>   context.getClientSession().getUserSessionNotes().put("someKey","someValue");
>     ...
> }
>
> is this the intended way to do this sort of things?
>
> Cheers,
> Thomas
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user