Pass custom claims from token response to the application

[sanjayaa]

Is it possible to pass the custom claims that arrive in the JSON payload returned by the token endpoint?

I see id_token, refresh_token, access_token and access_token_expires from the token response get passed to the application in respective headers. Also I see that I can get the claims from UserInfo endpoint and claims in the ID token passed to the application.

However I need to pass some other custom claims from the token response. Is there any configuration that I'm missing or is this not possible at all? Appreciate any help.

mod_auth_openidc version used: 2.4.12.

[zandbelt]

no, that is not possible, mostly because it is beyond the scope of the OpenID Connect spec

[zandbelt]

FWIW: bd6cfa7 allows for passing and authorization on the "scope" parameter returned from the token endpoint, which is as defined in the spec (i.e. still no custom parameters, but at least one defined parameter is consumed now)