Skip to content

Commit 42e3d07

Browse files
authored
fix: clarify generic OIDC provider issuer behaviour (#1642)
1 parent cdc39a1 commit 42e3d07

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

Diff for: docs/kratos/social-signin/05_generic.mdx

+7
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,13 @@ mapping.
109109
The **Data mapping** section allows you to map the claims returned by the sign-in provider to traits as defined in the identity
110110
schema.
111111

112+
:::note
113+
114+
For generic providers with `claims_source=userinfo`, the issuer claim will be ignored if the userinfo response is not signed. This
115+
behavior aligns with the OpenID Connect specification.
116+
117+
:::
118+
112119
To define the mapping, create a Jsonnet code snippet. Read [this document](./data-mapping) to learn more about Jsonnet data
113120
mapping.
114121

0 commit comments

Comments
 (0)