auth-backend: add omitIdentityTokenOwnershipClaim flag

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2025-04-24 00:39:56 +02:00
parent 332e934112
commit 0d606aca23
13 changed files with 273 additions and 20 deletions
@@ -43,6 +43,15 @@ export interface Config {
     */
    identityTokenAlgorithm?: string;

+    /**
+     * Whether to omit the entity ownership references (`ent`) claim from the
+     * identity token. If this is enabled the `ent` claim will only be available
+     * via the user info endpoint and the `UserInfoService`.
+     *
+     * Defaults to `false`.
+     */
+    omitIdentityTokenOwnershipClaim?: boolean;
+
    /** To control how to store JWK data in auth-backend */
    keyStore?: {
      provider?: 'database' | 'memory' | 'firestore' | 'static';