Hello, i'm trying to augment the JWT token with additional claims. Something that i've tested on OSS hydra that worked but now i'm trying to implement this on the Ory Network and somehow i'm not able to augment the JWT. How should my webhook be configured in order to be able to update the JWT with additional info ? What I return from my webhook as follows, but it never gets to the token when i inspect it

{
  "session": {
    "access_token": {
      "tenant_id": 124390123
    },
    "id_token": {
      "tenant_id": 124390123
    }
  }
}

Is the webhook target (e.g your code) called at all?

Yes it's called. When I use Login pre/after it's called

In Ory Network it's also a token hook, not login webhook. Ory Network's OAuth2 is fully compatible with the OSS Hydra

It's called with empty body .. i haven't added anything in the function (ctx) { } but this should be okay IMO

Yes it's part of the oauth2-config in the CLI

Do you have an example somewhere that I can use ?

You can use the same config that you used in OSS and upload that to the Ory Network project. But if you only want to configure the token hook, you can use this guide: https://www.ory.sh/docs/hydra/guides/claims-at-refresh

Awesome, thanks

I think by default we only add basic information to the userinfo endpoint, such as name and email. If you have a custom UI you can customize this more, though

I customized it but is it possible to expose the information in the userinfo ?

yes, if you implement your own

acceptOAuth2ConsentRequest

call. See here for an example https://github.com/ory/kratos-selfservice-ui-node/blob/master/src/routes/consent.ts#L112

i.e i added trait

role

and wonder if I can expose this in the userInfo, the only way to get it right now is to call

admin/identities/{subject}

but idk if this is the right way to do this