OIDC include profile picture

[klawitterb]

Unless I'm missing something the profile information provided by the build in oidc provider doesn't seem to include the users profile picture.
Would it be possible to include this as well?

[girish]

Good idea, I guess we need to implement the picture claim per https://openid.net/specs/openid-connect-basic-1_0.html . @nebulon what do you think?

[nebulon]

Next release will have that, had to rework the profile avatar handling overall a bit, but it is now done.

[girish]

@klawitterb do you know which apps support the picture claim?

[klawitterb]

Tbh not really but I am check with my own app if I’m getting anything

[klawitterb]

@girish just wanted to check this but my /.well-known/openid-configuration endpoint doesn't list the picture claim?
Am I missing something? I'm on v7.7.2.

"claims_supported": [
    "sub",
    "email",
    "email_verified",
    "family_name",
    "given_name",
    "locale",
    "name",
    "preferred_username",
    "sid",
    "auth_time",
    "iss
]

[nebulon]

Good catch, it wasn't advertised from the provider. Fixed with https://git.cloudron.io/cloudron/box/-/commit/76c4002a040d1e5dd262c23441688e90242e28dc