This week in review: Week 34

Highlights

• Require the user information your application needs. Make a name and email address mandatory for every user. If either is missing, Torii collects it after authentication and MFA, whether the user signs in with a password, OAuth, or MitID, or arrives through an invitation. Users created through the backend must provide the same information from the start.
• Use selected claims directly in JWTs. Choose which claims Torii retains from Google, GitHub, and MitID, then use them in JWT templates. Examples include name and picture from Google, login and avatar_url from GitHub, or given_name and family_name from MitID. Your application can receive relevant information directly in each user’s sign-in token without separate API calls.

Thanks for following along. More next week.