feat: add username to session JWT and public session API responses

backend/dto/session.go

@@ -53,6 +53,7 @@ type Claims struct {
 	Audience   []string   `json:"audience,omitempty"`
 	Issuer     *string    `json:"issuer,omitempty"`
 	Email      *EmailJwt  `json:"email,omitempty"`
+	Username   *string    `json:"username,omitempty"`
 	SessionID  uuid.UUID  `json:"session_id"`
 }
 
@@ -109,6 +110,12 @@ func GetClaimsFromToken(token jwt.Token) (*Claims, error) {
 		}
 	}
 
+	if username, valid := token.Get("username"); valid {
+		if usernameStr, validStr := username.(string); validStr {
+			claims.Username = &usernameStr
+		}
+	}
+
 	claims.Expiration = token.Expiration()
 
 	return claims, nil

backend/flow_api/flow/shared/hook_issue_session.go

@@ -9,6 +9,7 @@ import (
 	"github.com/teamhanko/hanko/backend/dto"
 	"github.com/teamhanko/hanko/backend/flowpilot"
 	"github.com/teamhanko/hanko/backend/persistence/models"
+	"github.com/teamhanko/hanko/backend/session"
 	"time"
 )
 
@@ -40,7 +41,12 @@ func (h IssueSession) Execute(c flowpilot.HookExecutionContext) error {
 		emailDTO = dto.JwtFromEmailModel(email)
 	}
 
-	signedSessionToken, rawToken, err := deps.SessionManager.GenerateJWT(userId, emailDTO)
+	var generateJWTOptions []session.JWTOptions
+	if userModel.Username != nil {
+		generateJWTOptions = append(generateJWTOptions, session.WithValue("username", userModel.Username.Username))
+	}
+
+	signedSessionToken, rawToken, err := deps.SessionManager.GenerateJWT(userId, emailDTO, generateJWTOptions...)
 	if err != nil {
 		return fmt.Errorf("failed to generate JWT: %w", err)
 	}