[openstreetmap/openstreetmap-website] Add openid connect support using doorkeeper-openid_connect gem (PR #4226)

[Milan Cvetkovic]

I added a separate `profile` scope with some additional claims - normally part of public information and easily accessible from `users` table. Moved `preferred_username` to `profile` scope.

ID_TOKEN contains:
- `sub` (OSM user id)
- preferred_username (OSM display name)
- email
- email_verified

`/oauth2/userinfo` endpoint returns:
- `sub`
- `preferred_username`
- `email`
- `email_verififed`
- `profile` - profile url
- `description` - from profile, if available
- `contributor_terms_agreed` (boolean)
- `changesets_count`
- `traces_count`

Only fields appropriate for the scope are returned:
- `email` and `email_verified` only for privileged users having `read_email` scope
- `sub` field is the only field returned with `openid` scope, The remaining fields are in `profile` scope


-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/4226#issuecomment-1710470757
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/4226/c1710470757 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20230907/691e8eda/attachment.htm>