[flyer5200]

Changelog category

• New Feature

Changelog entry

• Sync phone numbers and picture URLs from OIDC identity providers and expose them through UserInfo.

Affected version

• Latest development version

Background and implementation

Applications using GrantForge as an OIDC provider need user phone numbers and avatar URLs when identities come from external providers such as Casdoor.

Persist phone and picture fields on local accounts and update them from upstream OIDC claims at sign-in. The phone claim is configurable (default phone for Casdoor); picture uses the standard claim. Missing upstream values leave stored values unchanged. Add the phone scope to OAuth client configuration, return phone_number for that scope and picture for profile, and update the console, API contract, migrations and documentation.

Validation

• UserInfo, OIDC configuration, external account, federated sign-in and OpenAPI contract tests (Java 21)
• Java Checkstyle, PMD and SpotBugs
• Frontend type checking, ESLint, identity source and OAuth client tests; i18n key check
• Manual Casdoor acceptance of phone_number and picture