Use schacc as email

src/kszkepzes/oidc_auth.py

@@ -4,10 +4,17 @@ from common.email import registration
 
 
 class JSOIDCAuthBackend(OIDCAuthenticationBackend):
+    def get_email(self, claims):
+        sam_account_name = claims.get('directory.sch.bme.hu:sAMAccountName')
+        if sam_account_name:
+            return f"{sam_account_name}@sch.bme.hu"
+        return ""
+
     def create_user(self, claims):
         user = super(JSOIDCAuthBackend, self).create_user(claims)
         user.first_name = claims.get('given_name', '')
         user.last_name = claims.get('family_name', '')
+        user.email = self.get_email(claims)
         user.save()
         models.Profile.objects.create(user=user)
         if user.email is not None:

src/kszkepzes/settings/base.py

@@ -154,7 +154,7 @@ OIDC_OP_TOKEN_ENDPOINT = os.environ.get('OIDC_TOKEN_ENDPOINT')
 OIDC_OP_USER_ENDPOINT = os.environ.get('OIDC_USERINFO_ENDPOINT')
 OIDC_OP_JWKS_ENDPOINT = os.environ.get('OIDC_JWKS_ENDPOINT')
 OIDC_RP_SIGN_ALGO = os.environ.get('OIDC_SIGN_ALGO', 'RS256')
-OIDC_RP_SCOPES = os.environ.get('OIDC_RP_SCOPES', 'openid email profile offline_access')
+OIDC_RP_SCOPES = os.environ.get('OIDC_RP_SCOPES', 'openid email profile offline_access directory.sch.bme.hu:sAMAccountName')
 OIDC_VERIFY_KID = False
 OIDC_EXEMPT_URLS = ["/healthz/", "/admin/", "/oidc/"]
 LOGIN_REDIRECT_URL = "/"