{"action":"created","issue":{"url":"https://api.github.com/repos/ory/hydra/issues/1032","repository_url":"https://api.github.com/repos/ory/hydra","labels_url":"https://api.github.com/repos/ory/hydra/issues/1032/labels{/name}","comments_url":"https://api.github.com/repos/ory/hydra/issues/1032/comments","events_url":"https://api.github.com/repos/ory/hydra/issues/1032/events","html_url":"https://github.com/ory/hydra/issues/1032","id":360075168,"node_id":"MDU6SXNzdWUzNjAwNzUxNjg=","number":1032,"title":"ACR claim not being set on id token when requested by login accept request","user":{"login":"bbulczynski","id":36228324,"node_id":"MDQ6VXNlcjM2MjI4MzI0","avatar_url":"https://avatars3.githubusercontent.com/u/36228324?v=4","gravatar_id":"","url":"https://api.github.com/users/bbulczynski","html_url":"https://github.com/bbulczynski","followers_url":"https://api.github.com/users/bbulczynski/followers","following_url":"https://api.github.com/users/bbulczynski/following{/other_user}","gists_url":"https://api.github.com/users/bbulczynski/gists{/gist_id}","starred_url":"https://api.github.com/users/bbulczynski/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bbulczynski/subscriptions","organizations_url":"https://api.github.com/users/bbulczynski/orgs","repos_url":"https://api.github.com/users/bbulczynski/repos","events_url":"https://api.github.com/users/bbulczynski/events{/privacy}","received_events_url":"https://api.github.com/users/bbulczynski/received_events","type":"User","site_admin":false},"labels":[{"id":943397994,"node_id":"MDU6TGFiZWw5NDMzOTc5OTQ=","url":"https://api.github.com/repos/ory/hydra/labels/investigate","name":"investigate","color":"9ed140","default":false},{"id":620366028,"node_id":"MDU6TGFiZWw2MjAzNjYwMjg=","url":"https://api.github.com/repos/ory/hydra/labels/oauth2","name":"oauth2","color":"5319e7","default":false},{"id":784957211,"node_id":"MDU6TGFiZWw3ODQ5NTcyMTE=","url":"https://api.github.com/repos/ory/hydra/labels/oidc","name":"oidc","color":"5319e7","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/ory/hydra/milestones/22","html_url":"https://github.com/ory/hydra/milestone/22","labels_url":"https://api.github.com/repos/ory/hydra/milestones/22/labels","id":3502566,"node_id":"MDk6TWlsZXN0b25lMzUwMjU2Ng==","number":22,"title":"v1.0.0-rc.1","description":"","creator":{"login":"aeneasr","id":3372410,"node_id":"MDQ6VXNlcjMzNzI0MTA=","avatar_url":"https://avatars3.githubusercontent.com/u/3372410?v=4","gravatar_id":"","url":"https://api.github.com/users/aeneasr","html_url":"https://github.com/aeneasr","followers_url":"https://api.github.com/users/aeneasr/followers","following_url":"https://api.github.com/users/aeneasr/following{/other_user}","gists_url":"https://api.github.com/users/aeneasr/gists{/gist_id}","starred_url":"https://api.github.com/users/aeneasr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aeneasr/subscriptions","organizations_url":"https://api.github.com/users/aeneasr/orgs","repos_url":"https://api.github.com/users/aeneasr/repos","events_url":"https://api.github.com/users/aeneasr/events{/privacy}","received_events_url":"https://api.github.com/users/aeneasr/received_events","type":"User","site_admin":false},"open_issues":4,"closed_issues":20,"state":"open","created_at":"2018-07-17T12:20:50Z","updated_at":"2018-09-14T07:47:53Z","due_on":null,"closed_at":null},"comments":5,"created_at":"2018-09-13T21:35:27Z","updated_at":"2018-09-20T07:49:18Z","closed_at":null,"author_association":"NONE","body":"**Do you want to request a *feature* or report a *bug*?**\r\nBug\r\n\r\n**What is the current behavior?**\r\nHydra is not applying acr value send in login accept request to idToken claim acr, acr is allways set to \"0\". \r\n\r\n**If the current behavior is a bug, please provide the steps to reproduce and if possible a minimal demo of the problem.**\r\n\r\n1. On fresh env prepared according to [5 minute tutorial](https://www.ory.sh/docs/guides/v1.0.0-beta.8/hydra/1-tutorial/) \r\n2. Execute:\r\n`docker exec -it hydra_hydra_1     hydra token user     --client-id auth-code-client     --client-secret secret     --endpoint http://localhost:4444/     --port 5555     --scope openid,offline`\r\n\r\n*Using POSTMAN*\r\n3. Start authorisation request \r\n`curl -X GET \\\r\n  'http://localhost:4444/oauth2/auth?client_id=auth-code-client&redirect_uri=http%3A%2F%2F127.0.0.1%3A5555%2Fcallback&response_type=code&scope=openid+offline&state=dvdpslouplmovbwpwlisngoy&nonce=dzcflbtjchgblfocytbpsrpf&acr_values=1+2' \\\r\n  -H 'Cache-Control: no-cache' \\\r\n  -H 'Postman-Token: 32167cef-0703-4e38-b339-90f47087c8e2'`\r\n\r\n4. Accept login request:\r\n`curl -X PUT \\\r\n  http://localhost:4445/oauth2/auth/requests/login/6943d3ab880b49e7826f70e85bd20349/accept \\\r\n  -H 'Cache-Control: no-cache' \\\r\n  -H 'Content-Type: application/json' \\\r\n  -H 'Postman-Token: ec486c1a-3a4c-409d-8b85-5d722f841eb7' \\\r\n  -d '{\"acr\":\"2\", \"remember\":false, \"remember_for\":0, \"subject\":\"foo@bar.com\", \"force_subject_identifier\":\"foo@bar.com\"}'`\r\n\r\n5'. Accept consent request\r\n`curl -X PUT \\\r\n  http://localhost:4445/oauth2/auth/requests/consent/998f6a3ff5f043869f62699fe0488c27/accept \\\r\n  -H 'Cache-Control: no-cache' \\\r\n  -H 'Content-Type: application/json' \\\r\n  -H 'Postman-Token: a5343561-c20c-4271-b1da-fc22723ee2de' \\\r\n  -d '{\"grant_scope\":[\"openid\",\"offline\"], \"remember\":false, \"remember_for\":0}'`\r\n\r\n6. fallow redirections:\r\n`curl -X GET \\\r\n  'http://localhost:4444/oauth2/auth?acr_values=1+2&client_id=auth-code-client&consent_verifier=37b65b5fc4134b65afbd34204b1e43f4&nonce=dzcflbtjchgblfocytbpsrpf&redirect_uri=http%3A%2F%2F127.0.0.1%3A5555%2Fcallback&response_type=code&scope=openid+offline&state=dvdpslouplmovbwpwlisngoy' \\\r\n  -H 'Cache-Control: no-cache' \\\r\n  -H 'Postman-Token: aef1a836-e501-48ec-804a-42fe60edc178'`\r\n\r\n*RESULT:*\r\n```\r\n<<html>\r\n    <head></head>\r\n    <body>\r\n        <ul>\r\n            <li>Access Token: \r\n                <code>2yno3_Ahu0g7f3wFzrI8X0pJ7mQJoONEpg7JptmAbt0.1ojwpvuNJE7x5JWyk8uYbTre1quZxISesf5YT8qKKtk</code>\r\n            </li>\r\n            <li>Refresh Token: \r\n                <code>51ihQE9sC_6JVckPKdj-_OMm_CjSrUeJ9k_QPyftHAM.7rBi9Mhx6svok3A5EMAyk4wnhJSUSLHr2wUMi__MF5o</code>\r\n            </li>\r\n            <li>Expires in: \r\n                <code>2018-09-14 13:00:03.387005916 +0000 UTC m=+3725.953416942</code>\r\n            </li>\r\n            <li>ID Token: \r\n                <code>eyJhbGciOiJSUzI1NiIsImtpZCI6InB1YmxpYzozN2JhOTMxYy1hM2Q0LTQ5ZjgtYmFkYS01ZTNkZmE1MGVlZDAiLCJ0eXAiOiJKV1QifQ.eyJhY3IiOiIwIiwiYXVkIjpbImF1dGgtY29kZS1jbGllbnQiXSwiYXV0aF90aW1lIjoxNTM2OTI2MzU3LCJleHAiOjE1MzY5MzAwMDQsImlhdCI6MTUzNjkyNjQwNCwiaXNzIjoiaHR0cDovL2xvY2FsaG9zdDo0NDQ0LyIsImp0aSI6IjFkYjg2NmUxLTgzZjAtNGQ3Ny04ZTQzLTEzNmMxNWE5ODUwNCIsIm5vbmNlIjoiZHpjZmxidGpjaGdibGZvY3l0YnBzcnBmIiwicmF0IjoxNTM2OTI2MzI5LCJzdWIiOiJmb29AYmFyLmNvbSJ9.FaeBqkQ71HCudW1MU5XUnQE-Yd5mOm8zqnJ46x0iqQ_pXI9IwlPqqWPaCVlZGR3DXc2RpDW5QY65g2MEKTQFCBCZUpFT8x4_MaLxlzKVQrPnVJhDLGO18YU6NSAOdGz9v4rufNb8kCLxO7iGJExoLqy-osTzf7flFibrABiwVnhmU-oHTu3jnB1F-1vXuIk-tRVEgWqkeJ8PivX8N9wx-tTElz-nW5CFX2CkdNx_3C1CCmOLf36Oxr01c0_SQjtfpmkZsAeJujFXML5Ua3QU3D50I9ivH8hQjv67QW4yycQ78l8UYX19Q3ddFbVbrhyBW0IaMKnbp3DWCsTxLU9Af42X9nbWjW9igYSutsp6Gx8uzRmurHDWXaQfB8zkZ3skCRBtzPNLUcJN53dN6nGUMzd0NS5xfNi3f9eKvZquxrbcQT0_n57CdpvY8n8dUh0LTyq-V0MGd7Vx9RSoidKtmo4vKGi-JnyoowoZ1DhaqgBFbrYDBylLit7xvQw6XpdyLi4tmnfWzegTNBl7yyN5SF8nlCvFzt03QDlQQpGx5joxP5Irb4HFiLzO1rGLIQWVw3TgD5mXgh8mdUC6b7Aru9zCo_3lbirytikyz1RnpARhy4KJvTU15XbNav9xMtwJwQl7TBCRX3T3jZTUh1dgYu1BLjQAJnphWs05lPbFeBY</code>\r\n            </li>\r\n        </ul>\r\n    </body>\r\n</html>\r\n```\r\n\r\njwt.io decoded IdToken:\r\n`{\r\n  \"acr\": \"0\",\r\n  \"aud\": [\r\n    \"auth-code-client\"\r\n  ],\r\n  \"auth_time\": 1536926357,\r\n  \"exp\": 1536930004,\r\n  \"iat\": 1536926404,\r\n  \"iss\": \"http://localhost:4444/\",\r\n  \"jti\": \"1db866e1-83f0-4d77-8e43-136c15a98504\",\r\n  \"nonce\": \"dzcflbtjchgblfocytbpsrpf\",\r\n  \"rat\": 1536926329,\r\n  \"sub\": \"foo@bar.com\"\r\n}`\r\n\r\n**What is the expected behavior?**\r\nId token should contain \"acr\":\"2\" claim\r\n\r\n**Which version of the software is affected?**\r\nV 1.0.0-beta.8 and V 1.0.0-beta.9\r\n\r\n*Edit*\r\nAt first description there was error in authorisation request.\r\n"},"comment":{"url":"https://api.github.com/repos/ory/hydra/issues/comments/423077874","html_url":"https://github.com/ory/hydra/issues/1032#issuecomment-423077874","issue_url":"https://api.github.com/repos/ory/hydra/issues/1032","id":423077874,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMzA3Nzg3NA==","user":{"login":"aeneasr","id":3372410,"node_id":"MDQ6VXNlcjMzNzI0MTA=","avatar_url":"https://avatars3.githubusercontent.com/u/3372410?v=4","gravatar_id":"","url":"https://api.github.com/users/aeneasr","html_url":"https://github.com/aeneasr","followers_url":"https://api.github.com/users/aeneasr/followers","following_url":"https://api.github.com/users/aeneasr/following{/other_user}","gists_url":"https://api.github.com/users/aeneasr/gists{/gist_id}","starred_url":"https://api.github.com/users/aeneasr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aeneasr/subscriptions","organizations_url":"https://api.github.com/users/aeneasr/orgs","repos_url":"https://api.github.com/users/aeneasr/repos","events_url":"https://api.github.com/users/aeneasr/events{/privacy}","received_events_url":"https://api.github.com/users/aeneasr/received_events","type":"User","site_admin":false},"created_at":"2018-09-20T07:49:18Z","updated_at":"2018-09-20T07:49:18Z","author_association":"MEMBER","body":"Busy schedule, will try to get it done next week."}}
{"actor":{"display_login":"aeneasr"}}