bearer-token-attributes
Use this entry to set a JSON data element from the bearer token response, which should be included in the credential as an extended attribute.
bearer-token-attributes = [+|-]<json-data>
Description
Multiple rules can be specified by creating additional configuration entries of the same name. When a bearer token is received each JSON data element will be evaluated against each rule in sequence until a match is found. The corresponding code (+|-) will then be used to determine Whether the JSON data will be added to the credential or not. If the JSON data name does not match a configured rule it will by default be added to the credential.
Options
+ That this JSON data should be added to the credential. - That this JSON data should not be added to the credential. <json-data> The corresponding JSON data name, which can also contain pattern matching characters (i.e. * ?).
Usage: Optional
Default value None.
Example:
bearer-token-attributes = -access_token
Parent topic: [oidc:default] stanza