Hi,
I’m using auth0 as IDP and tried to use namespaced claim for JSON path. It works non-namespaced claim eg. geoserver_roles but not namespaced claim eg. http://example.com/user_roles
Could you modify code to here (row 45) to support both?
/* (c) 2026 Open Source Geospatial Foundation - all rights reserved
* This code is licensed under the GPL 2.0 license, available at the root
* application directory.
*/
package org.geoserver.security.oauth2.token;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Collections;
import java.util.List;
import java.util.Map;
import java.util.stream.Collectors;
import net.minidev.json.JSONArray;
/**
* Helpers for extracting claim values out of JWT/OIDC claim maps and normalizing them into a {@code List<String>}.
*
* <p>This is a self-contained replacement for the previously-borrowed helpers from the {@code jwt-headers} community
* module. The OIDC plugin must not depend on a community module once it is promoted to extension status, so these two
* static utilities (originally {@code JwtHeaderUserNameExtractor.getClaim} and
show original
Auth0 recommends to use namespace claims for custom claims:
You can make a PR to do this, then one of the volunteers will try to find time to look at it. This is open source so there’s no you in the chain.
Ian
Ian Turton