custom claim 권한체크 확인

2026-06-11 08:29:25 +09:00
parent 839ca9d407
commit 4d77060b5d
79 changed files with 4268 additions and 670 deletions
--- a/backend/internal/handler/auth_handler.go
+++ b/backend/internal/handler/auth_handler.go
@@ -1612,6 +1612,17 @@ func applyConfiguredIDTokenClaims(baseClaims map[string]any, metadata map[string
 	}

 	for _, claim := range normalizedClaims {
+		if claim.Nullable && strings.TrimSpace(claim.Value) == "" {
+			if claim.Namespace == "rp_claims" {
+				rpClaims[claim.Key] = nil
+				continue
+			}
+			if _, exists := baseClaims[claim.Key]; !exists {
+				baseClaims[claim.Key] = nil
+			}
+			continue
+		}
+
 		value, err := parseConfiguredClaimValue(claim.Value, claim.ValueType)
 		if err != nil {
 			slog.Warn("failed to parse configured id token claim", "namespace", claim.Namespace, "key", claim.Key, "error", err)