feat(auth): add env variable to force user-info usage instead of idtoken (#2711)

2025-03-27 22:57:06 +01:00
parent 1a3a55934d
commit 94d3dad909
3 changed files with 6 additions and 0 deletions
--- a/packages/auth/env.ts
+++ b/packages/auth/env.ts
@@ -39,6 +39,7 @@ export const env = createEnv({
          AUTH_OIDC_SCOPE_OVERWRITE: z.string().min(1).default("openid email profile groups"),
          AUTH_OIDC_GROUPS_ATTRIBUTE: z.string().default("groups"), // Is used in the signIn event to assign the correct groups, key is from object of decoded id_token
          AUTH_OIDC_NAME_ATTRIBUTE_OVERWRITE: z.string().optional(),
+          AUTH_OIDC_FORCE_USERINFO: createBooleanSchema(false),
        }
      : {}),
    ...(authProviders.includes("ldap")