CognitoIDP: Replace email with username in cogntio JWT tokens (#5652)
This commit is contained in:
		
							parent
							
								
									ea8718d402
								
							
						
					
					
						commit
						8c9838cc8c
					
				@ -538,7 +538,7 @@ class CognitoIdpUserPool(BaseModel):
 | 
				
			|||||||
            "token_use": token_use,
 | 
					            "token_use": token_use,
 | 
				
			||||||
            "auth_time": now,
 | 
					            "auth_time": now,
 | 
				
			||||||
            "exp": now + expires_in,
 | 
					            "exp": now + expires_in,
 | 
				
			||||||
            "email": flatten_attrs(self._get_user(username).attributes).get("email"),
 | 
					            "username": username,
 | 
				
			||||||
        }
 | 
					        }
 | 
				
			||||||
        payload.update(extra_data or {})
 | 
					        payload.update(extra_data or {})
 | 
				
			||||||
        headers = {"kid": "dummy"}  # KID as present in jwks-public.json
 | 
					        headers = {"kid": "dummy"}  # KID as present in jwks-public.json
 | 
				
			||||||
 | 
				
			|||||||
@ -2838,6 +2838,7 @@ def test_token_legitimacy():
 | 
				
			|||||||
        id_token = outputs["id_token"]
 | 
					        id_token = outputs["id_token"]
 | 
				
			||||||
        access_token = outputs["access_token"]
 | 
					        access_token = outputs["access_token"]
 | 
				
			||||||
        client_id = outputs["client_id"]
 | 
					        client_id = outputs["client_id"]
 | 
				
			||||||
 | 
					        username = outputs["username"]
 | 
				
			||||||
        issuer = "https://cognito-idp.us-west-2.amazonaws.com/{}".format(
 | 
					        issuer = "https://cognito-idp.us-west-2.amazonaws.com/{}".format(
 | 
				
			||||||
            outputs["user_pool_id"]
 | 
					            outputs["user_pool_id"]
 | 
				
			||||||
        )
 | 
					        )
 | 
				
			||||||
@ -2851,6 +2852,7 @@ def test_token_legitimacy():
 | 
				
			|||||||
        access_claims["iss"].should.equal(issuer)
 | 
					        access_claims["iss"].should.equal(issuer)
 | 
				
			||||||
        access_claims["aud"].should.equal(client_id)
 | 
					        access_claims["aud"].should.equal(client_id)
 | 
				
			||||||
        access_claims["token_use"].should.equal("access")
 | 
					        access_claims["token_use"].should.equal("access")
 | 
				
			||||||
 | 
					        access_claims["username"].should.equal(username)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
@mock_cognitoidp
 | 
					@mock_cognitoidp
 | 
				
			||||||
 | 
				
			|||||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user