majiayu000/claude-arsenal
xiaohongshu
xiaohongshu
286 148
View 
カスタムクレーム（Custom Claims）開発ガイド
custom-claims
カスタムクレーム（Custom Claims）機能の開発・修正を行う際に使用。claims: scopeマッピング、verified_claims: マッピング実装時に役立つ。
SKILL.md
Full skill instructions
カスタムクレーム（Custom Claims）開発ガイド
ドキュメント
documentation/docs/content_03_concepts/04-tokens-claims/concept-03-custom-claims.md- カスタムクレーム概念documentation/docs/content_03_concepts/04-tokens-claims/concept-01-id-token.md- ID Token概念
機能概要
カスタムクレーム機能は、ID Tokenに任意の属性を含める層。
- カスタムクレームscopeマッピング:
claims:attribute_name構文 - Verified claimマッピング:
verified_claims:attribute_name構文（OIDC4IDA準拠）
モジュール構成
libs/
└── idp-server-core/ # クレームコア
└── .../oauth/
├── response/
│ ├── AuthorizationResponseIdTokenCreator.java
│ ├── AuthorizationResponseCodeIdTokenCreator.java
│ └── AuthorizationResponseCodeTokenIdTokenCreator.java
└── token/
└── (トークン生成関連クラス)
ID Token生成
idp-server-core/oauth/response/ 内:
ID Token生成は、response type別に複数のCreatorクラスが存在します:
| クラス | 用途 |
|---|---|
AuthorizationResponseIdTokenCreator | Implicit FlowでのID Token生成 |
AuthorizationResponseCodeIdTokenCreator | Authorization Code Flowでのresponse ID Token生成 |
AuthorizationResponseCodeTokenIdTokenCreator | Hybrid Flowでのresponse ID Token生成 |
カスタムクレームscopeマッピング
Scope構文
claims:attribute_name
カスタムクレームは、claims: プレフィックスでscopeを指定することで、
ID Tokenに任意の属性を含めることができます。
Verified Claimマッピング（OIDC4IDA）
Scope構文
verified_claims:attribute_name
Verified Claimは、verified_claims: プレフィックスでscopeを指定することで、
本人確認済みの属性をID Tokenに含めることができます。
前提条件: ユーザーが本人確認済み（isIdentityVerified()）であること
E2Eテスト
e2e/src/tests/
└── spec/
├── oidc_core_2_id_token.test.js # ID Token仕様テスト
└── oidc_core_2_id_token_extension.test.js
コマンド
# ビルド
./gradlew :libs:idp-server-core:compileJava
# テスト
cd e2e && npm test -- spec/oidc_core_2_id_token.test.js
cd e2e && npm test -- spec/oidc_core_2_id_token_extension.test.js
トラブルシューティング
カスタムクレームがID Tokenに含まれない
- Scope形式が正しいか確認（
claims:attribute_name） - ユーザーの
custom_propertiesに属性が存在するか確認
Verified Claimが含まれない
- ユーザーが本人確認済みか確認（
user.isIdentityVerified()） - 認証方式が要件を満たすか確認
More skills from majiayu000
majiayu000/claude-arsenal
technical-spec
technical spec
286 141
View majiayu000/claude-arsenal
product-ux-expert
product ux expert
286 133
View majiayu000/claude-arsenal
database-patterns
database patterns
286 119
View majiayu000/claude-skill-registry
agent-task-conductor
Conduct multi-agent task orchestration and workflow coordination.
663 1
View majiayu000/claude-skill-registry
conductor-setup
Initialize project with Conductor artifacts (product definition,
663 1
View majiayu000/claude-skill-registry
animation-designer
Expert in web animations, transitions, and motion design using Framer Motion and CSS
663 1
View majiayu000/claude-skill-registry
diagramming
Creates Mermaid and ASCII diagrams for flowcharts, architecture, ERDs, state machines, mindmaps, and more. Use when user mentions diagram, flowchart, mermaid, ASCII diagram, text diagram, terminal diagram, visualize, C4, mindmap, architecture diagram, sequence diagram, ERD, or needs visual docume...
663 1
View majiayu000/claude-skill-registry-data
h3-pg
PostgreSQL bindings for H3 hexagonal grid system. Use when working with H3 cells in Postgres, including spatial indexing, geometry/geography integration, and raster analysis.
23 1
View majiayu000/claude-skill-registry
conductor-development
Context-Driven Development skill for projects using Conductor. Use this skill when you detect a `conductor/` directory in the project, when working on tasks defined in a `plan.md` file, or when the user asks about tracks, specs, or plans. Automatically applies TDD workflow, tracks task completion...
663 1
View majiayu000/claude-skill-registry
conductor-status
Display project status, active tracks, and next actions
663 1
View majiayu000/claude-skill-registry
dockerization
Official Stakpak application containerization standard operating procedure, a step-by-step guidline to properly dockerize applications. This is a rule book curated by the Stakpak Team.
663 1
View Popular AI tools
Video
Kaiber
Generate, edit, and beat-sync AI video with leading models in one workspace.
Paid
View Productivity
Vimcal
The world's fastest calendar for remote work
Free
View Images
IMGCreator.ai
Transform Your Design with AI Designer by ImgCreator.ai
Freemium
View Content & writing
Akool AI
Revolutionizing Video Production with AI-Powered Creativity
Paid
View Images
Clipdrop Uncrop
Extend an image past the frame and let AI fill the new aspect ratio.
Freemium
View Security
StarByFace
Discover your celebrity doppelgänger with StarByFace!
Free
View C
Finance
ChainClarity
ChainClarity explains 700+ crypto whitepapers in plain English, with layered summaries, comparisons, research tools, alerts, and a $4.99 Pro plan.
Freemium
View Coding & apps
Opus Clip
Opus.ai: Revolutionize Your Web Experience
Free
View