Blank OIDC claims no longer count, so identity falls through to the userinfo lookup.
What's wrong with this entry?
Reading identity claims from an OIDC token now rejects zero-length strings, so a blank claim falls through to the userinfo lookup instead of being accepted as a value. Affects OIDC-configured deployments only.
- Scalar claims require
J.length > 0; array claims filter ontypeof O === "string" && O.length > 0. - Presence checks were split into their own helpers ahead of the userinfo fallback.
oidc id_token claim names request_id=
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.234
Signing back into the same account keeps a pending auto-resume
Both mention auth
-
v2.1.234
Token screen reports actual remaining validity
Both mention auth
-
v2.1.234
Setup-token login result carries the expiry
Both mention auth