How can I get username when call /admin/oauth2/introspect

[AnastasiaZaytseva]

Hello here!
Since hydra 2.x it's impossible to set custom client-id.
Ok, in this case, I would get username attribute in response of /introspect endpoint. IntrospectedOAuth2Token
Or any custom attribute where I can pass my old identifier instead of client-id for mapping it for consistency.
But I can't get it. I have empty username.
Maybe I need some specific setting, I don't know.
Please, can you help me understand it?

So it's my steps:

1. create client
Request

POST http://localhost:4445/admin/clients
Content-Type: application/json

{
  "scope": "bank.read bank.decision bank.remove openid uaa.resource",
  "grant_types": [
    "client_credentials"
  ],
  "client_name": "bank-asya",
  "token_endpoint_auth_method": "client_secret_post",
  "owner": "bank-asya",
  "metadata": {
    "client_name": "bank-asya"
  },
  "allowedCorsOrigins": ["https://editor.swagger.io"],
  "responseTypes": ["token"]
}

Response

{
  "client_id": "3902a3bc-47f2-4beb-a2f4-7c216c1c382b",
  "client_name": "bank-asya",
  "client_secret": "smth_secret",
  "redirect_uris": null,
  "grant_types": [
    "client_credentials"
  ],
  "response_types": null,
  "scope": "bank.read bank.decision bank.remove openid uaa.resource",
  "audience": [],
  "owner": "bank-asya",
  "policy_uri": "",
  "allowed_cors_origins": [],
  "tos_uri": "",
  "client_uri": "",
  "logo_uri": "",
  "contacts": null,
  "client_secret_expires_at": 0,
  "subject_type": "public",
  "jwks": {},
  "token_endpoint_auth_method": "client_secret_post",
  "userinfo_signed_response_alg": "none",
  "created_at": "2022-12-15T09:27:10Z",
  "updated_at": "2022-12-15T09:27:09.956502Z",
  "metadata": {
    "client_name": "bank-asya"
  },
  "registration_access_token": "ory_at_nPVogmyo23pOTK...",
  "registration_client_uri": "https://{{my_host}}/oauth2/register/3902a3bc-47f2-4beb-a2f4-7c216c1c382b",
  "authorization_code_grant_access_token_lifespan": null,
  "authorization_code_grant_id_token_lifespan": null,
  "authorization_code_grant_refresh_token_lifespan": null,
  "client_credentials_grant_access_token_lifespan": null,
  "implicit_grant_access_token_lifespan": null,
  "implicit_grant_id_token_lifespan": null,
  "jwt_bearer_grant_access_token_lifespan": null,
  "refresh_token_grant_id_token_lifespan": null,
  "refresh_token_grant_access_token_lifespan": null,
  "refresh_token_grant_refresh_token_lifespan": null
}

2. Get token

Request

POST http://localhost:4444/oauth2/token HTTP/1.1
Content-Type: application/x-www-form-urlencoded

client_id=3902a3bc-47f2-4beb-a2f4-7c216c1c382b&client_secret={{smth_secret}}&grant_type=client_credentials&scope=bank.read bank.decision bank.remove openid

Response

{
  "access_token": "ory_at_8VMwW-Byqc...",
  "expires_in": 3599,
  "scope": "bank.read bank.decision bank.remove openid uaa.resource",
  "token_type": "bearer"
}

3. Make /admin/oauth2/introspect request
Request

POST http://localhost:4445/admin/oauth2/introspect HTTP/1.1
Content-Type: application/x-www-form-urlencoded

token=ory_at_8VMwW-Byqc...

Response

{
  "active": true,
  "scope": "bank.read bank.decision bank.remove openid uaa.resource",
  "client_id": "3902a3bc-47f2-4beb-a2f4-7c216c1c382b",
  "sub": "3902a3bc-47f2-4beb-a2f4-7c216c1c382b",
  "exp": 1671100343,
  "iat": 1671096743,
  "nbf": 1671096743,
  "aud": [],
  "iss": "https://uaa.mp-dev.cian.tech",
  "token_type": "Bearer",
  "token_use": "access_token"
}

[vinckr]

Hello @AnastasiaZaytseva,
apologies for the late answer,
what would be the expected response in the introspect request? It seems to me everything is working.