add userinfo endpoint

Signed-off-by: hongming <hongming@kubesphere.io>

pkg/apiserver/authentication/token/issuer.go

@@ -83,22 +83,30 @@ type Claims struct {
 	jwt.StandardClaims
 	// Private Claim Names
 	// TokenType defined the type of the token
-	TokenType Type `json:"token_type"`
-	// Username is user identity same as `sub`
-	Username string `json:"username"`
+	TokenType Type `json:"token_type,omitempty"`
+	// Username user identity, deprecated field
+	Username string `json:"username,omitempty"`
+	// Extra contains the additional information
+	Extra map[string][]string `json:"extra,omitempty"`
+
+	// Used for issuing authorization code
+	// Scopes can be used to request that specific sets of information be made available as Claim Values.
+	Scopes []string `json:"scopes,omitempty"`
+
+	// The following is well-known ID Token fields
+
+	// End-User's full name in displayable form including all name parts,
+	// possibly including titles and suffixes, ordered according to the End-User's locale and preferences.
+	Name string `json:"name,omitempty"`
 	// String value used to associate a Client session with an ID Token, and to mitigate replay attacks.
 	// The value is passed through unmodified from the Authentication Request to the ID Token.
 	Nonce string `json:"nonce,omitempty"`
-	// Scopes can be used to request that specific sets of information be made available as Claim Values.
-	Scopes []string `json:"scopes,omitempty"`
 	// End-User's preferred e-mail address.
 	Email string `json:"email,omitempty"`
 	// End-User's locale, represented as a BCP47 [RFC5646] language tag.
 	Locale string `json:"locale,omitempty"`
 	// Shorthand name by which the End-User wishes to be referred to at the RP,
 	PreferredUsername string `json:"preferred_username,omitempty"`
-	// Extra contains the additional information
-	Extra map[string][]string `json:"extra,omitempty"`
 }
 
 type issuer struct {
@@ -128,6 +136,9 @@ func (s *issuer) IssueTo(request *IssueRequest) (string, error) {
 	if len(request.Audience) > 0 {
 		claims.Audience = request.Audience
 	}
+	if request.Name != "" {
+		claims.Name = request.Name
+	}
 	if request.Nonce != "" {
 		claims.Nonce = request.Nonce
 	}