From c32cf68ce38bc6e26316f8dc06af0c151a4a9ab0 Mon Sep 17 00:00:00 2001 From: Bjarne Fyrstenborg Date: Tue, 4 Feb 2025 15:24:01 +0100 Subject: [PATCH 1/4] Update README.md --- .../README.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/15/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api/README.md b/15/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api/README.md index 3b8541c5f77..7d79bcc94c8 100644 --- a/15/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api/README.md +++ b/15/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api/README.md @@ -365,6 +365,25 @@ To terminate the active session for any given member, you must redirect the brow GET /umbraco/delivery/api/v1/security/member/signout?post_logout_redirect_uri={valid URL from LogoutRedirectUrls} ``` +### User info + +The "user info" endpoint is part of the OpenId Connect core spec. + +This implementation returns a few of the standard claims, all of which are subject of availability: + +- `sub` (required claim) +- `name` (if available) +- `email` (if available) + +On top of this, the member groups (if any) are returned in the role claim. + +The implementation is build to be extendable, so custom claims can be added to these claims - and the core claims can be removed, too. + +```http +GET /umbraco/delivery/api/v1/security/member/userinfo +``` + + ## Testing with Swagger The Delivery API Swagger document can be configured to support member authentication. From e9ad6439fc64b63e8eda15c1b4f0ae17cd9f7b0f Mon Sep 17 00:00:00 2001 From: Bjarne Fyrstenborg Date: Tue, 4 Feb 2025 15:26:14 +0100 Subject: [PATCH 2/4] Update README.md --- .../protected-content-in-the-delivery-api/README.md | 1 - 1 file changed, 1 deletion(-) diff --git a/15/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api/README.md b/15/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api/README.md index 7d79bcc94c8..6d4fd6336cc 100644 --- a/15/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api/README.md +++ b/15/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api/README.md @@ -383,7 +383,6 @@ The implementation is build to be extendable, so custom claims can be added to t GET /umbraco/delivery/api/v1/security/member/userinfo ``` - ## Testing with Swagger The Delivery API Swagger document can be configured to support member authentication. From 74f17e8f5a6000b28320788d7ab2aaf8f2673dcd Mon Sep 17 00:00:00 2001 From: Bjarne Fyrstenborg Date: Tue, 4 Feb 2025 15:29:58 +0100 Subject: [PATCH 3/4] Update protected-content-in-the-delivery-api.md --- .../protected-content-in-the-delivery-api.md | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/13/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api.md b/13/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api.md index 5e15da9fd7e..2f59a1fab30 100644 --- a/13/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api.md +++ b/13/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api.md @@ -382,6 +382,28 @@ To terminate the active session for any given member, you must redirect the brow GET /umbraco/delivery/api/v1/security/member/signout?post_logout_redirect_uri={valid URL from LogoutRedirectUrls} ``` +### User info + +The "user info" endpoint is part of the OpenId Connect core spec. + +This implementation returns a few of the standard claims, all of which are subject of availability: + +- `sub` (required claim) +- `name` (if available) +- `email` (if available) + +On top of this, the member groups (if any) are returned in the role claim. + +The implementation is build to be extendable, so custom claims can be added to these claims - and the core claims can be removed, too. + +```http +GET /umbraco/delivery/api/v1/security/member/userinfo +``` + +{% hint style="warning" %} +This was introduced in Umbraco 13.6.0. +{% endhint %} + ## Testing with Swagger The Delivery API Swagger document can be configured to support member authentication. From 73955ee7aa08e1a541081f4448ed91c34aedf728 Mon Sep 17 00:00:00 2001 From: Bjarne Fyrstenborg Date: Tue, 4 Feb 2025 15:31:20 +0100 Subject: [PATCH 4/4] Update protected-content-in-the-delivery-api.md --- .../protected-content-in-the-delivery-api.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/13/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api.md b/13/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api.md index 2f59a1fab30..d5f39813e45 100644 --- a/13/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api.md +++ b/13/umbraco-cms/reference/content-delivery-api/protected-content-in-the-delivery-api.md @@ -400,7 +400,7 @@ The implementation is build to be extendable, so custom claims can be added to t GET /umbraco/delivery/api/v1/security/member/userinfo ``` -{% hint style="warning" %} +{% hint style="info" %} This was introduced in Umbraco 13.6.0. {% endhint %}