Decided on naming convention for local dynamic claims.

Author: rohe

src/oidcmsg/oidc/__init__.py

@@ -259,7 +259,7 @@ def verify(self, **kwargs):
             if not idt.verify(**kwargs):
                 return False
 
-            self["verified_id_token"] = idt
+            self["__verified_id_token"] = idt
             logger.info('Verified ID Token: {}'.format(idt.to_dict()))
 
         return True
@@ -325,7 +325,7 @@ def verify(self, **kwargs):
                 if idt["c_hash"] != jws.left_hash(self["code"], hfunc):
                     raise CHashError("Failed to verify code hash", idt)
 
-            self["verified_id_token"] = idt
+            self["__verified_id_token"] = idt
         return True
 
 

tests/test_6_oidc.py

@@ -643,7 +643,7 @@ def test_at_hash():
 
     at = AuthorizationResponse(**_info)
     assert at.verify(keyjar=keyjar, sigalg="HS256")
-    assert 'at_hash' in at['verified_id_token']
+    assert 'at_hash' in at['__verified_id_token']
 
 
 def test_c_hash():
@@ -667,7 +667,7 @@ def test_c_hash():
 
     at = AuthorizationResponse(**_info)
     r = at.verify(keyjar=keyjar, sigalg="HS256")
-    assert 'c_hash' in at['verified_id_token']
+    assert 'c_hash' in at['__verified_id_token']
 
 
 def test_missing_c_hash():