Method __call__

authlib/oidc/core/userinfo.py:64–83

(self, request: OAuth2Request)

        return self.server.create_oauth2_request(request)

    def __call__(self, request: OAuth2Request):
        token = self.resource_protector.acquire_token("openid")
        client = token.get_client()
        user = token.get_user()
        user_info = self.generate_user_info(user, token.scope)

        if alg := client.client_metadata.get("userinfo_signed_response_alg"):
            # If signed, the UserInfo Response MUST contain the Claims iss
            # (issuer) and aud (audience) as members. The iss value MUST be
            # the OP's Issuer Identifier URL. The aud value MUST be or
            # include the RP's Client ID value.
            user_info["iss"] = self.get_issuer()
            user_info["aud"] = client.client_id

            key = import_any_key(self.resolve_private_key())
            algorithms = self.get_supported_algorithms()
            data = jwt.encode({"alg": alg}, user_info, key, algorithms)
            return 200, data, [("Content-Type", "application/jwt")]

        return 200, user_info, default_json_headers

    def get_supported_algorithms(self) -> list[str]:
        """Return the supported algorithms for userinfo signing.