#13, use validated principal claims

DuendeSoftware · Jan 20, 2025 · dbf9357 · dbf9357
1 parent a4f690d
commit dbf9357
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/AspNetCore.Authentication.JwtBearer/DPoP/DPoPJwtBearerEvents.cs b/src/AspNetCore.Authentication.JwtBearer/DPoP/DPoPJwtBearerEvents.cs
@@ -82,7 +82,7 @@ public override async Task TokenValidated(TokenValidatedContext context)
                 Scheme = context.Scheme.Name,
                 ProofToken = proofToken,
                 AccessToken = at,
-                AccessTokenClaims = parsedToken?.Claims ?? [],
+                AccessTokenClaims = context.Principal?.Claims ?? parsedToken?.Claims ?? [],
                 Method = context.HttpContext.Request.Method,
                 Url = context.HttpContext.Request.Scheme + "://" + context.HttpContext.Request.Host + context.HttpContext.Request.PathBase + context.HttpContext.Request.Path
             });