Custom Description for Spontaneous Scopes

[tawaren]

When a Spontaneous Scope is requested, the consent page shows the result of the toString() method of the corresponding Scope object, which is confusing and uninformative to the end user.

Is there an easy way to set/overwrite the description of a Spontaneous Scope?
If not, do I need to make a custom consent-gathering interception script to achieve a more admirable display?

[nynymike]

@yuriyz any thoughts? Could Markus use the Update Token script instead so he doesn't have to implement consent-gathering?

[yuriyz]

Currently consent page renders description of the scope as far as I can see:

jans/jans-auth-server/server/src/main/webapp/WEB-INF/incl/layout/authorize-extended-template.xhtml

Line 61 in 23ef80c

<td><h:outputText value="#{_scope.description}" /></td>

And description of spontaneous scope is "Spontaneous scope: " + <scope object address>.
This indeed is not very useful. I've just raised PR to put scopeId in description
#9752

It will be available in next release. If you can't wait you can workaround with at least two ways:

1. provide own customized authorization page and render in the way it is needed instead of

                                                       <ui:repeat var="_scope" value="#{_scopes}">
								<li>
									<table>
										<tr>
											<td><span class="user"><i
													class="fa fa-user-circle"></i></span></td>
											<td><h:outputText value="#{_scope.description}" /></td>
										</tr>
									</table>
								</li>
							</ui:repeat>

2. second way it to overwrite description in some custom script. For example in PostAuthnType in any method (or some other script).
   You can identify all scopes by creatorId. If it's client's scopes then simply creatorId=<clientId>.

[tawaren]

Thanks. I can work with the workarounds if I need it before the next release happens.