[OID4VCI] Attribute did should only be added to user profile if oid4vci is enabled for the realm#46311
[OID4VCI] Attribute did should only be added to user profile if oid4vci is enabled for the realm#46311tdiesler wants to merge 1 commit intokeycloak:mainfrom
Conversation
mposolda
left a comment
There was a problem hiding this comment.
It seems this is not really fixed.
The did attribute is not really added dynamically to the user-profile. For example when I create new realm test in the admin console, then I enable Verifiable credentials for that realm and I create some user in the realm, I do not see did attribute in the user's profile.
As I've pointed already, I think that you can use same pattern like it is used for example for the locale attribute, which is added trully dynamically to the user profile based on whether localization is enabled for the realm. See https://github.com/keycloak/keycloak/blob/release/26.5/services/src/main/java/org/keycloak/userprofile/DeclarativeUserProfileProviderFactory.java#L427 , https://github.com/keycloak/keycloak/blob/release/26.5/services/src/main/java/org/keycloak/userprofile/DeclarativeUserProfileProviderFactory.java#L490 , https://github.com/keycloak/keycloak/blob/release/26.5/services/src/main/java/org/keycloak/userprofile/DeclarativeUserProfileProviderFactory.java#L507 . I think same pattern should be possible to use for did attribute, which would be added when verifiable credentials is enabled for the realm though?
The attribute did is localized only in account console, but still not localized when looking at the admin console and when updating profile of the user in the "login" theme (Triggered by adding "Update profile" required action to the user). It may probably need update in js/apps/admin-ui/maven-resources/theme/keycloak.v2/admin/messages/messages_en.properties (for admin theme) and themes/src/main/resources/theme/base/login/messages/messages_en.properties (for login theme). There are separate files for "login" theme, "account" theme and "Admin" theme and some things (like user-profile attributes) need to be updated in all those places.
…CI is enabled for the realm Signed-off-by: Thomas Diesler <tdiesler@ibm.com>
closes #46297