From 803b2c1930ae67760736c07d365811ae20fbb5ab Mon Sep 17 00:00:00 2001 From: Quentin BEY Date: Thu, 13 Mar 2025 14:52:00 +0100 Subject: [PATCH] =?UTF-8?q?=F0=9F=90=9B(oauth2)=20remove=20ProConnect=20un?= =?UTF-8?q?known=20claims?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit When we don't have information about the requested claims, they must be ignored. --- src/backend/mailbox_oauth2/validators.py | 9 --------- 1 file changed, 9 deletions(-) diff --git a/src/backend/mailbox_oauth2/validators.py b/src/backend/mailbox_oauth2/validators.py index 2a84f00..7f57282 100644 --- a/src/backend/mailbox_oauth2/validators.py +++ b/src/backend/mailbox_oauth2/validators.py @@ -162,15 +162,6 @@ class ProConnectValidator(BaseValidator): request.user.domain.organization.registration_id_list[0][:9] ) - for empty_claim in [ - "organizational_unit", - "belonging_population", - "phone", - "chorusdt", - ]: - if empty_claim in request.scopes: - additional_claims[empty_claim] = "" - # Include 'acr' claim if it is present in the request claims and equals 'eidas1' # see _create_authorization_code method for more details if request.claims and request.claims.get("acr") == "eidas1":