Why does ClientInfo carry a User ID?

[tobiassjosten]

Looking at the ClientInfo interface, there's a GetUserID() method. How could that be populated after a call to ClientStore.GetByID? I'm not 100% certain how all of this ties together but it seems impossible to pick one specific user based on only a Client's ID.

Maybe at least this specific property could be the first target for #228? :)

[jarlandre]

This used by OpenID Connect to identify the logged in user. For client credentials this will not be filled out naturally, but with auth code with pkce flow, the user id will be the logged in user. Either via the AS internal authentication mechanisms (if one chooses to add that) or from some other identity provider. One identity provider might ask the user the authorise towards a different identity provider to obtain a valid logged in state for the authorisation to complete.

[jarlandre]

related to #224

[tobiassjosten]

Thanks, @jarlandre! Sounds like it might be something I'll have to dig into further, as I'm using the auth code with PKCE flow.

[bokunodev]

can we document this?