diff --git a/server/src/main/java/access/security/CustomOidcUserService.java b/server/src/main/java/access/security/CustomOidcUserService.java index 9672d7b8..e4f2c54c 100644 --- a/server/src/main/java/access/security/CustomOidcUserService.java +++ b/server/src/main/java/access/security/CustomOidcUserService.java @@ -41,6 +41,7 @@ public OidcUser loadUser(OidcUserRequest userRequest) throws OAuth2Authenticatio // Delegate to the default implementation for loading a user OidcUser oidcUser = delegate.loadUser(userRequest); Map claims = oidcUser.getUserInfo().getClaims(); + // We need a mutable Map instead of the returned immutable Map Map newClaims = new HashMap<>(claims); String sub = (String) newClaims.get("sub");