feat: support minio (#418)

Signed-off-by: abingcbc <abingcbc626@gmail.com>

object/oidc_discovery.go

@@ -85,6 +85,7 @@ func GetJsonWebKeySet() (jose.JSONWebKeySet, error) {
 	var jwk jose.JSONWebKey
 	jwk.Key = x509Cert.PublicKey
 	jwk.Certificates = []*x509.Certificate{x509Cert}
+	jwk.KeyID = cert.Name
 
 	var jwks jose.JSONWebKeySet
 	jwks.Keys = []jose.JSONWebKey{jwk}

object/token_jwt.go

@@ -26,6 +26,7 @@ import (
 type Claims struct {
 	*User
 	Nonce string `json:"nonce,omitempty"`
+	Tag   string `json:"tag,omitempty"`
 	jwt.RegisteredClaims
 }
 
@@ -67,6 +68,8 @@ func generateJwtToken(application *Application, user *User, nonce string) (strin
 	claims := Claims{
 		User:  user,
 		Nonce: nonce,
+		// FIXME: A workaround for custom claim by reusing `tag` in user info
+		Tag: user.Tag,
 		RegisteredClaims: jwt.RegisteredClaims{
 			Issuer:    beego.AppConfig.String("origin"),
 			Subject:   user.Id,
@@ -102,6 +105,7 @@ func generateJwtToken(application *Application, user *User, nonce string) (strin
 		return "", "", err
 	}
 
+	token.Header["kid"] = cert.Name
 	tokenString, err := token.SignedString(key)
 	if err != nil {
 		return "", "", err

object/user_util.go

@@ -65,7 +65,7 @@ func GetUserByFields(organization string, field string) *User {
 	}
 
 	// check ID card
-	user = GetUserByField(organization, "idCard", field)
+	user = GetUserByField(organization, "id_card", field)
 	if user != nil {
 		return user
 	}