Extend Transaction Metadata to the Custom Token Exchange flow

Product Feedback
, ,
1

Feature: Allow transaction metadata set in a Custom Token Exchange Action to be read by the following Post Login Action

Description: The Transaction Metadata feature is an obviously superior method of passing data between actions than previous techniques (shoving it in user metadata or the api cache) and a welcome addition. But it isn’t available in the CTE Action (yet?).

Use-case: I want to use use CTE to re-use another identity provider for some things, but the subject_token has some necessary information inside it that I need to be carried over as a custom claim in the issued token.

Example:

It would be great if we could do this:

// The Custom Token Exchange Trigger
exports.onExecuteCustomTokenExchange = async (event, api) => {
  const { isValid, payload } = await validateToken(
    event.transaction.subject_token,
  );
  if (isValid) {
    api.authentication.setUserById(payload.sub);
    api.transaction.setMetadata('my_custom_claim', payload.my_custom_claim);
  }
  // etc.
};

// A post-login trigger
exports.onExecutePostLogin = async (event, api) => {
  // etc. etc.
  if (event.transaction.protocol === 'oauth2-token-exchange') {
    api.accessToken.setCustomClaim('urn:blah:custom', event.transaction?.metadata?.my_custom_claim);
  }
};
3

Hi @shennessey

Thanks for submitting this feature card, do not forget to upvote it!

Currently, this feature is being addressed in our backlog, however, it does not have an ETA to when it will become available.

Kind Regards,
Nik