Method userInfoClaims

coderd/userauth.go:1593–1628

(ctx context.Context, rw http.ResponseWriter, state httpmw.OAuth2State, logger slog.Logger)

}

func (api *API) userInfoClaims(ctx context.Context, rw http.ResponseWriter, state httpmw.OAuth2State, logger slog.Logger) (userInfoClaims map[string]interface{}, ok bool) {
	userInfoClaims = make(map[string]interface{})
	userInfo, err := api.OIDCConfig.Provider.UserInfo(ctx, oauth2.StaticTokenSource(state.Token))
	switch {
	case err == nil:
		err = userInfo.Claims(&userInfoClaims)
		if err != nil {
			logger.Error(ctx, "oauth2: unable to unmarshal user info claims", slog.Error(err))
			httpapi.Write(ctx, rw, http.StatusInternalServerError, codersdk.Response{
				Message: "Failed to unmarshal user info claims.",
				Detail:  err.Error(),
			})
			return nil, false
		}
		logger.Debug(ctx, "got oidc claims",
			slog.F("source", "userinfo"),
			slog.F("claim_fields", claimFields(userInfoClaims)),
			slog.F("blank", blankFields(userInfoClaims)),
		)
	case !strings.Contains(err.Error(), "user info endpoint is not supported by this provider"):
		logger.Error(ctx, "oauth2: unable to obtain user information claims", slog.Error(err))
		httpapi.Write(ctx, rw, http.StatusInternalServerError, codersdk.Response{
			Message: "Failed to obtain user information claims.",
			Detail:  "The attempt to fetch claims via the UserInfo endpoint failed: " + err.Error(),
		})
		return nil, false
	default:
		// The OIDC provider does not support the UserInfo endpoint.
		// This is not an error, but we should log it as it may mean
		// that some claims are missing.
		logger.Warn(ctx, "OIDC provider does not support the user info endpoint, ensure that all required claims are present in the id_token",
			slog.Error(err),
		)
	}
	return userInfoClaims, true
}

// claimFields returns the sorted list of fields in the claims map.
func claimFields(claims map[string]interface{}) []string {