Skip to content

Commit e952c4b

Browse files
committed
Add populate_user_metadata in OIDC realm
Resolves: elastic#48217
1 parent 204ff83 commit e952c4b

File tree

2 files changed

+6
-3
lines changed

2 files changed

+6
-3
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authc/oidc/OpenIdConnectRealmSettings.java

+2-2
Original file line numberDiff line numberDiff line change
@@ -150,8 +150,8 @@ public static Set<Setting.AffixSetting<?>> getSettings() {
150150
final Set<Setting.AffixSetting<?>> set = Sets.newHashSet(
151151
RP_CLIENT_ID, RP_REDIRECT_URI, RP_RESPONSE_TYPE, RP_REQUESTED_SCOPES, RP_CLIENT_SECRET, RP_SIGNATURE_ALGORITHM,
152152
RP_POST_LOGOUT_REDIRECT_URI, OP_AUTHORIZATION_ENDPOINT, OP_TOKEN_ENDPOINT, OP_USERINFO_ENDPOINT,
153-
OP_ENDSESSION_ENDPOINT, OP_ISSUER, OP_JWKSET_PATH, HTTP_CONNECT_TIMEOUT, HTTP_CONNECTION_READ_TIMEOUT, HTTP_SOCKET_TIMEOUT,
154-
HTTP_MAX_CONNECTIONS, HTTP_MAX_ENDPOINT_CONNECTIONS, ALLOWED_CLOCK_SKEW);
153+
OP_ENDSESSION_ENDPOINT, OP_ISSUER, OP_JWKSET_PATH, POPULATE_USER_METADATA, HTTP_CONNECT_TIMEOUT, HTTP_CONNECTION_READ_TIMEOUT,
154+
HTTP_SOCKET_TIMEOUT, HTTP_MAX_CONNECTIONS, HTTP_MAX_ENDPOINT_CONNECTIONS, ALLOWED_CLOCK_SKEW);
155155
set.addAll(DelegatedAuthorizationSettings.getSettings(TYPE));
156156
set.addAll(RealmSettings.getStandardSettings(TYPE));
157157
set.addAll(SSLConfigurationSettings.getRealmSettings(TYPE));

x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authc/oidc/OpenIdConnectRealmTests.java

+4-1
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,7 @@
4949
import static org.hamcrest.Matchers.instanceOf;
5050
import static org.hamcrest.Matchers.notNullValue;
5151
import static org.mockito.Matchers.any;
52+
import static org.mockito.Matchers.isNull;
5253
import static org.mockito.Mockito.doAnswer;
5354
import static org.mockito.Mockito.mock;
5455
import static org.mockito.Mockito.when;
@@ -90,6 +91,8 @@ public void testAuthentication() throws Exception {
9091
if (notPopulateMetadata == false) {
9192
assertThat(result.getUser().metadata().get("oidc(iss)"), equalTo("https://op.company.org"));
9293
assertThat(result.getUser().metadata().get("oidc(name)"), equalTo("Clinton Barton"));
94+
} else {
95+
assertThat(result.getUser().metadata().size(), equalTo(0));
9396
}
9497
}
9598

@@ -308,7 +311,7 @@ private AuthenticationResult authenticateWithOidc(String principal, UserRoleMapp
308311

309312
final Settings.Builder builder = getBasicRealmSettings();
310313
if (notPopulateMetadata) {
311-
builder.put(getFullSettingKey(REALM_NAME, SamlRealmSettings.POPULATE_USER_METADATA),
314+
builder.put(getFullSettingKey(REALM_NAME, OpenIdConnectRealmSettings.POPULATE_USER_METADATA),
312315
false);
313316
}
314317
if (useAuthorizingRealm) {

0 commit comments

Comments
 (0)