Skip to content

Commit

Permalink
remove object_id as it was duplicate
Browse files Browse the repository at this point in the history
  • Loading branch information
dudil committed Apr 4, 2024
1 parent c073d9c commit a0ff7ed
Showing 1 changed file with 0 additions and 12 deletions.
12 changes: 0 additions & 12 deletions fastapi_msal/models/id_token_claims.py
Original file line number Diff line number Diff line change
Expand Up @@ -159,18 +159,6 @@ class IDTokenClaims(UserInfo, AADInternalClaims, BaseAuthModel):
Your app should perform this validation during the ID token validation process.
"""

object_id: OptStr = Field(None, alias="oid")
"""
The immutable identifier for an object, in this case, a user account.
This ID uniquely identifies the user across applications -
two different applications signing in the same user receives the same value in the oid claim.
Microsoft Graph returns this ID as the id property for a user account.
Because the oid allows multiple apps to correlate users,
the profile scope is required to receive this claim. If a single user exists in multiple tenants,
the user contains a different object ID in each tenant - they're considered different accounts,
even though the user logs into each account with the same credentials. The oid claim is a GUID and can't be reused.
"""

subject: OptStr = Field(None, alias="sub")
"""
This is the principal about which the token asserts information, such as the user of an app.
Expand Down

0 comments on commit a0ff7ed

Please sign in to comment.