Instructions for Sending the User's Email, First Name, and Last Name

[dudetechitout]

For some reason, the oidc_user_claims filter is not working as expected. To include this information in the token being sent, you will need to edit the IdToken.php file located in the vendor directory (src/OAuth2/OpenID/ResponseType/IdToken.php or /wp-content/plugins/openid-connect-server/vendor/bshaffer/oauth2-server-php/src/OAuth2/OpenID/ResponseType/IdToken.php). In the createIdToken function, add the following code:

$user = get_user_by('login', $user_id);

if ( $user ) {
    $token['email'] = ! empty( $user->user_email ) ? $user->user_email : '';
    $token['given_name'] = ! empty( $user->first_name ) ? $user->first_name : '';
    $token['family_name'] = ! empty( $user->last_name ) ? $user->last_name : '';
    $token['name'] = $user->display_name; // Full display name
    $token['role'] = implode( ', ', $user->roles );
}

Under if ($userClaims) { $token += $userClaims; }

Making the function look like below:

/**
 * Create id token
 *
 * @param string $client_id
 * @param mixed  $userInfo
 * @param mixed  $nonce
 * @param mixed  $userClaims
 * @param mixed  $access_token
 * @return mixed|string
 */
public function createIdToken($client_id, $userInfo, $nonce = null, $userClaims = null, $access_token = null)
{
    // pull auth_time from user info if supplied
    list($user_id, $auth_time) = $this->getUserIdAndAuthTime($userInfo);

    $token = array(
        'iss'        => $this->config['issuer'],
        'sub'        => $user_id,
        'aud'        => $client_id,
        'iat'        => time(),
        'exp'        => time() + $this->config['id_lifetime'],
        'auth_time'  => $auth_time,
    );

    if ($nonce) {
        $token['nonce'] = $nonce;
    }

    if ($userClaims) {
        $token += $userClaims;
    }

    $user = get_user_by('login', $user_id);

    if ( $user ) {
        $token['email'] = ! empty( $user->user_email ) ? $user->user_email : '';
        $token['given_name'] = ! empty( $user->first_name ) ? $user->first_name : '';
        $token['family_name'] = ! empty( $user->last_name ) ? $user->last_name : '';
        $token['name'] = $user->display_name; // Full display name
        $token['role'] = implode( ', ', $user->roles );
    }

    if ($access_token) {
        $token['at_hash'] = $this->createAtHash($access_token, $client_id);
    }

    return $this->encodeToken($token, $client_id);
}

This has also been submitted to the vender: bshaffer/oauth2-server-php#1084

I'd really appreciate it if you could credit my contribution and include an acknowledgment of my input in the final implementation. Thanks so much!

[ashfame]

How did you try to use the oidc_user_claims filter? The answer probably lies there in incorrect usage. Your suggested code changes are not required to be made, and will definitely not be merged in bshaffer's lib as you added a WordPress function call to a project that has nothing to do with WordPress, it would result in a Fatal error.

If you can provide steps to reproduce the issue you faced, that would be helpful.