This message was deleted.

Hi @elegant-ocean-64421 Are you using the Ory Network Account Experience? Or do you have your own consent UI? The account experience only takes the traits of the identity and no metadata is added at the moment.

Thanks. Yes, we are using the Ory Network Accout Experience. Could we use https://www.ory.sh/docs/hydra/guides/claims-at-refresh to modify the issued access token for now?

Yes that should also work 🙂

Is there any authentication in place between the Ory Network and the webhook endpoint?

You can add authentication to the webhook https://www.ory.sh/docs/guides/integrate-with-ory-cloud-through-webhooks#request-authentication

Thank you. Can I really use this with the OAuth2 webhooks as well? I’ve read through the documentation and Hydras Code for handling the /oauth2/token_hook configuration. Seams like there is no api_key or basic_auth handling for these types of Webhooks. Or did I not understand how to combine the /oauth2/token_hook configuration with the webhook authentication?

Hmm yeah that seems to be the case. Nice catch! I have created an issue for this here https://github.com/ory/network/issues/324 We'll add it to the backlog and triage it in the coming weeks.

Okay, thanks for opening these issues. But for now, there is no secure way to attach custom data to the issued ID token?