Retrieve display name from UAA userinfo endpoint

The JSON Web Tokens returned by UAA contain only
user name and email address, but not the user's display name.
For that an additional request to the UAA /userinfo endpoint
is necessary. Note that the UAA client configured for
Gerrit must have the scope "openid" for this to work
as described in the configuration documentation.

Change-Id: I5d1169da88cb32c8eb4133e9710df7a200d7d74a
Signed-off-by: Michael Ochmann <>
2 files changed
tree: 4cb8792d54d84c63d940e08aad721dbc882305af
  1. lib/
  2. src/
  3. .buckconfig
  4. .gitignore
  5. BUCK
  7. LICENSE-scribe

Cloud Foundry UAA OAuth 2.0 Authentication Provider

With this plugin Gerrit can use OAuth2 protocol to authenticate users accessing Gerrit's Web UI with a CloudFoundry User Account and Authentication (UAA) server. The Sign In link will redirect the user to the UAA login screen.

For Git-over-HTTP communication users still need to generate and use an HTTP password.


Apache License 2.0