[Openid-specs-ab] Issue #17: Log decoded header parameter values for ID Tokens (openid/certification)

Michael Jones issues-reply at bitbucket.org
Thu Jan 22 02:03:29 UTC 2015


New issue 17: Log decoded header parameter values for ID Tokens
https://bitbucket.org/openid/certification/issue/17/log-decoded-header-parameter-values-for-id

Michael Jones:

Your pretty-printer for ID Token values currently shows the decoded claims, such as:

'id_token': {u'upn': u'interop at kauti.onmicrosoft.com', 'family_name': u'client', u'unique_name': u'interop at kauti.onmicrosoft.com', u'ver': u'1.0', 'sub': u'xoZ-9Fd225a5u2urz9EXstAjgYxY34KpK3V0u6zI8Sg', u'pwd_exp': u'3456766', 'iss': u'https://sts.windows.net/b4ea3de6-839e-4ad1-ae78-c78e5c0cdc06/', u'oid': u'42c39b5e-bd05-4a9a-9a5e-169d767fef2f', 'name': u'interop', u'pwd_url': u'https://portal.microsoftonline.com/ChangePassword.aspx', 'given_name': u'interop', 'exp': 1421894752, u'tid': u'b4ea3de6-839e-4ad1-ae78-c78e5c0cdc06', 'iat': 1421890852, 'amr': [u'pwd'], u'nbf': 1421890852, 'aud': [u'97a2e53a-1e7c-4a1b-869d-9cfedef8280a']}

But it doesn't currently show the decoded header parameter values.  Could you also show those?  Then the pretty-printed ID Token output would like something like this:

'id_token': {header {"typ":"JWT","alg":"RS256","x5t":"kriMPdmBvx68skT8-mPAB3BseeA"}, claims {u'upn': u'interop at kauti.onmicrosoft.com', 'family_name': u'client', u'unique_name': u'interop at kauti.onmicrosoft.com', u'ver': u'1.0', 'sub': u'xoZ-9Fd225a5u2urz9EXstAjgYxY34KpK3V0u6zI8Sg', u'pwd_exp': u'3456766', 'iss': u'https://sts.windows.net/b4ea3de6-839e-4ad1-ae78-c78e5c0cdc06/', u'oid': u'42c39b5e-bd05-4a9a-9a5e-169d767fef2f', 'name': u'interop', u'pwd_url': u'https://portal.microsoftonline.com/ChangePassword.aspx', 'given_name': u'interop', 'exp': 1421894752, u'tid': u'b4ea3de6-839e-4ad1-ae78-c78e5c0cdc06', 'iat': 1421890852, 'amr': [u'pwd'], u'nbf': 1421890852, 'aud': [u'97a2e53a-1e7c-4a1b-869d-9cfedef8280a']}}





More information about the Openid-specs-ab mailing list