Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hey <@U051FG4Q6BE>

I'll take a look for you and get back to you soon. From the surface this seems like a bug to me

It is possible, that this issue already occurred about three months before <https://ory-community.slack.com/archives/C02MR4DEEGH/p1683630107220479?thread_ts=1683615303.908149&amp;cid=C02MR4DEEGH>

Hi Max, sorry for not getting back sooner. Yes this needs to be exposed on our-side in the Ory Network, we have it on our backlog :slightly_smiling_face:

Hi Max, just a quick update. This fix has been merged and will be in production in the coming days.

Hey <@U01MTU9E4CF>, thanks for your callback. Nice to hear. We already found a solution for manipulating the ID-Token via a Custom (UI) Consent Flow.
<https://github.com/helpwave/services/blob/main/services/ory-svc/internal/ory/ory.go#L61>