Add extended JSON handling in OIDC API Proxy to include OIDC claims in specific requests

Author: fujita-h

endpoints/helpers/endpoint.py

@@ -131,6 +131,27 @@ def check_app_streaming_request(request: werkzeug.Request) -> Tuple[bool, bool]:
     return is_app_call, is_stream
 
 
+def get_extended_json(request: werkzeug.Request, claims: dict) -> Any | None:
+    if not request.is_json:
+        return None
+
+    json = request.get_json()
+    if request.method.lower() not in ["post"]:
+        return json
+    if request.path not in ["/chat-messages", "/workflows/run"]:
+        return json
+
+    if isinstance(json, dict) and "inputs" in json:
+        for claim in claims:
+            try:
+                key = f"__oidc_{claim}"
+                json["inputs"][key] = claims[claim]
+            except Exception:
+                pass
+
+    return json
+
+
 def replace_user_params(
     user: str,
     args: werkzeug.datastructures.MultiDict[str, str],

endpoints/oidc_api_proxy.py

@@ -4,7 +4,7 @@
 from dify_plugin import Endpoint
 from werkzeug import Request, Response
 
-from endpoints.helpers.endpoint import OidcApiProxyErrorResponse, proxy_response, replace_user_params
+from endpoints.helpers.endpoint import OidcApiProxyErrorResponse, get_extended_json, proxy_response, replace_user_params
 from endpoints.helpers.oidc import OpenIDConnectDiscoveryProvider
 
 
@@ -64,7 +64,7 @@ def _invoke(self, r: Request, values: Mapping, settings: Mapping) -> Response:
 
         # prepare params, json and data
         params = r.args
-        json = r.get_json() if r.is_json else None
+        json = get_extended_json(r, oidc_claims)
         data = r.form
 
         # replace user params