providers/oauth2: fallback to uid if UPN was selected but isn't available

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-10-27 16:11:35 +02:00 · 2021-10-27 16:11:35 +02:00 · 1b21b50b77
parent fa6324ab1d
commit 1b21b50b77
1 changed files with 1 additions and 1 deletions
--- a/authentik/providers/oauth2/models.py
+++ b/authentik/providers/oauth2/models.py
@ -448,7 +448,7 @@ class RefreshToken(ExpiringModel, BaseGrantModel):
        elif self.provider.sub_mode == SubModes.USER_USERNAME:
            sub = user.username
        elif self.provider.sub_mode == SubModes.USER_UPN:
-            sub = user.attributes["upn"]
+            sub = user.attributes.get("upn", user.uid)
        else:
            raise ValueError(
                (