Yasuke/moto
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

moto/issues/2670 | Moved population of user attributes from accessToken to idToken

Browse Source
This commit is contained in:
Franz See 2020-01-05 23:13:36 +08:00
parent 15889566b8
commit db75c9e25c
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
moto/cognitoidp/models.py
View File

@ -127,7 +127,8 @@ class CognitoIdpUserPool(BaseModel):
return jws.sign(payload, self.json_web_key, algorithm="RS256"), expires_in
def create_id_token(self, client_id, username):
id_token, expires_in = self.create_jwt(client_id, username, "id")
extra_data = self.get_user_extra_data_by_client_id(client_id, username)
id_token, expires_in = self.create_jwt(client_id, username, "id", extra_data=extra_data)
self.id_tokens[id_token] = (client_id, username)
return id_token, expires_in
@ -137,9 +138,8 @@ class CognitoIdpUserPool(BaseModel):
return refresh_token
def create_access_token(self, client_id, username):
extra_data = self.get_user_extra_data_by_client_id(client_id, username)
access_token, expires_in = self.create_jwt(
client_id, username, "access", extra_data=extra_data
client_id, username, "access"
)
self.access_tokens[access_token] = (client_id, username)
return access_token, expires_in

4
tests/test_cognitoidp/test_cognitoidp.py
View File

@ -1143,11 +1143,11 @@ def test_token_legitimacy():
id_claims["iss"].should.equal(issuer)
id_claims["aud"].should.equal(client_id)
id_claims["token_use"].should.equal("id")
for k, v in outputs["additional_fields"].items():
id_claims[k].should.equal(v)
access_claims = json.loads(jws.verify(access_token, json_web_key, "RS256"))
access_claims["iss"].should.equal(issuer)
access_claims["aud"].should.equal(client_id)
for k, v in outputs["additional_fields"].items():
access_claims[k].should.equal(v)
access_claims["token_use"].should.equal("access")