Bug ID 806809: JWT Claim value without quotes is invalid

Last Modified: Nov 22, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Fixed In:
15.1.0

Opened: Jul 17, 2019
Severity: 3-Major

Symptoms

JSON payload is invalid since claims are generated without quotes(")

Impact

Token is invalid.

Conditions

BIG-IP creates JWT claim value without quotes when scope is not openid.

Workaround

Replace claim type 'string' with 'custom' adding quotes after backslash. apm oauth oauth-claim /Common/uid { claim-name uid claim-type custom claim-value "\"%{session.custom.name:noconv}\"" }

Fix Information

Fixed code to generate string-claims with quotes irrespective of scope

Behavior Change