OIDC authentication with google oauth using only the unique ID, no user information

This is for an Xwiki being used in a small company to exchange documents and other information.

I would like to use Xwiki with google oauth so that users log in with their google account, but are still be able to change anything in their Xwiki profile.

I’m using OpenID Connect Authenticator with with these lines in xwiki.properties.

oidc.endpoint.authorization=https://accounts.google.com/o/oauth2/v2/aut
oidc.endpoint.token=https://oauth2.googleapis.com/token
oidc.endpoint.userinfo=https://openidconnect.googleapis.com/v1/userinfo
oidc.endpoint.logout=https://oauth2.googleapis.com/revoke

oidc.scope=openid

This returns the issuer and unique ID claims, but none of the user information which is then left to the user to edit as they please. The only exception is the profile pic, which is still being overwritten on the next login.

Is there any way to change that?

Also, since we’re not accepting users from outside the company we need to disable user registration

oidc.enableUser=false

But this still creates a user, and then immediately disables it. We would like to deny user registration all together.

Any help would be greatly appreciated.

6 posts - 2 participants

Read full topic