Fall back to using sub if email is none (as in PR oauth2-proxy#57)

lsst-dm · May 1, 2019 · d568cfa · d568cfa
1 parent 68a074f
commit d568cfa
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/oauthproxy.go b/oauthproxy.go
@@ -1040,6 +1040,7 @@ func (p *OAuthProxy) GetJwtSession(req *http.Request) (*providers.SessionState,
 		}
 
 		var claims struct {
+			Subject  string `json:"sub"`
 			Email    string `json:"email"`
 			Verified *bool  `json:"email_verified"`
 		}
@@ -1049,7 +1050,7 @@ func (p *OAuthProxy) GetJwtSession(req *http.Request) (*providers.SessionState,
 		}
 
 		if claims.Email == "" {
-			return nil, fmt.Errorf("id_token did not contain an email")
+			claims.Email = claims.Subject
 		}
 
 		if claims.Verified != nil && !*claims.Verified {