chore: update uaepass jsonnet stubs

pi1814 · ory-bot · commit 9823ae00f27e · 2026-03-20T08:48:09.000Z
GitOrigin-RevId: a7105cc75aaea68771fd6d3e1dade7587e9b773a
diff --git a/selfservice/strategy/oidc/provider_uaepass_test.go b/selfservice/strategy/oidc/provider_uaepass_test.go
@@ -43,7 +43,7 @@ func TestUAEPassOIDCClaims(t *testing.T) {
 			"lastnameEN": "Al Rashid",
 			"lastnameAR": "الراشد",
 			"uuid": "550e8400-e29b-41d4-a716-446655440000",
-			"unifiedID": "784-1990-1234567-1",
+			"unifiedId": "784-1990-1234567-1",
 			"idn": "784199012345671",
 			"userType": "SOP1",
 			"nationalityEN": "ARE",
@@ -80,7 +80,7 @@ func TestUAEPassOIDCClaims(t *testing.T) {
 	// Verify raw claims contain UAE PASS specific data
 	require.NotNil(t, claims.RawClaims)
 	assert.Equal(t, "550e8400-e29b-41d4-a716-446655440000", claims.RawClaims["uuid"])
-	assert.Equal(t, "784-1990-1234567-1", claims.RawClaims["unifiedID"])
+	assert.Equal(t, "784-1990-1234567-1", claims.RawClaims["unifiedId"])
 	assert.Equal(t, "784199012345671", claims.RawClaims["idn"])
 	assert.Equal(t, "SOP1", claims.RawClaims["userType"])
 	assert.Equal(t, "ARE", claims.RawClaims["nationalityEN"])
diff --git a/selfservice/strategy/oidc/stub/oidc.uaepass.jsonnet b/selfservice/strategy/oidc/stub/oidc.uaepass.jsonnet
@@ -1,61 +1,32 @@
-// UAE PASS identity mapper
-// Maps UAE PASS claims to Kratos identity traits
-//
-// UAE PASS provides the following claims (depending on scopes):
-// - sub: Subject identifier (unique user ID)
-// - email: User's email address
-// - fullnameEN / fullnameAR: Full name in English/Arabic
-// - firstnameEN / firstnameAR: First name in English/Arabic
-// - lastnameEN / lastnameAR: Last name in English/Arabic
-// - uuid: UUID identifier
-// - unifiedID: UAE unified identifier
-// - idn: Identity number
-// - userType: Profile type (SOP1=National, SOP2=Resident, SOP3=Visitor)
-// - nationalityEN: Nationality
-// - gender: Gender
-// - dob: Date of birth
-// - mobile: Mobile number
-
 local claims = std.extVar('claims');
 
-// Ensure we have a subject identifier
+local raw = claims.raw_claims;
+
 if std.length(claims.sub) == 0 then
   error 'claim sub not set'
 else
   {
     identity: {
       traits: {
-        // Required: subject identifier
         subject: claims.sub,
-
-        // Email (if available)
-        [if 'email' in claims && claims.email != '' then 'email' else null]: claims.email,
-
-        // Name mapping - prefer English names
-        [if 'fullnameEN' in claims && claims.fullnameEN != '' then 'name' else null]: {
-          full: claims.fullnameEN,
-          [if 'firstnameEN' in claims && claims.firstnameEN != '' then 'first' else null]: claims.firstnameEN,
-          [if 'lastnameEN' in claims && claims.lastnameEN != '' then 'last' else null]: claims.lastnameEN,
+        [if "email" in claims && claims.email != '' then "email" else null]: claims.email,
+        [if "fullnameEN" in raw && raw.fullnameEN != '' then "name" else null]: {
+          full: raw.fullnameEN,
+          [if "firstnameEN" in raw && raw.firstnameEN != '' then "first" else null]: raw.firstnameEN,
+          [if "lastnameEN" in raw && raw.lastnameEN != '' then "last" else null]: raw.lastnameEN,
         },
-
-        // Arabic name (optional)
-        [if 'fullnameAR' in claims && claims.fullnameAR != '' then 'name_ar' else null]: {
-          full: claims.fullnameAR,
-          [if 'firstnameAR' in claims && claims.firstnameAR != '' then 'first' else null]: claims.firstnameAR,
-          [if 'lastnameAR' in claims && claims.lastnameAR != '' then 'last' else null]: claims.lastnameAR,
+        [if "fullnameAR" in raw && raw.fullnameAR != '' then "name_ar" else null]: {
+          full: raw.fullnameAR,
+          [if "firstnameAR" in raw && raw.firstnameAR != '' then "first" else null]: raw.firstnameAR,
+          [if "lastnameAR" in raw && raw.lastnameAR != '' then "last" else null]: raw.lastnameAR,
         },
-
-        // UAE PASS specific identifiers
-        [if 'uuid' in claims && claims.uuid != '' then 'uuid' else null]: claims.uuid,
-        [if 'unifiedID' in claims && claims.unifiedID != '' then 'unified_id' else null]: claims.unifiedID,
-        [if 'idn' in claims && claims.idn != '' then 'idn' else null]: claims.idn,
-
-        // Profile metadata
-        [if 'userType' in claims && claims.userType != '' then 'user_type' else null]: claims.userType,
-        [if 'nationalityEN' in claims && claims.nationalityEN != '' then 'nationality' else null]: claims.nationalityEN,
-        [if 'gender' in claims && claims.gender != '' then 'gender' else null]: claims.gender,
-        [if 'dob' in claims && claims.dob != '' then 'date_of_birth' else null]: claims.dob,
-        [if 'mobile' in claims && claims.mobile != '' then 'phone' else null]: claims.mobile,
+        [if "uuid" in raw && raw.uuid != '' then "uuid" else null]: raw.uuid,
+        [if "unifiedId" in raw && raw.unifiedId != '' then "unified_id" else null]: raw.unifiedId,
+        [if "idn" in raw && raw.idn != '' then "idn" else null]: raw.idn,
+        [if "userType" in raw && raw.userType != '' then "user_type" else null]: raw.userType,
+        [if "nationalityEN" in raw && raw.nationalityEN != '' then "nationality" else null]: raw.nationalityEN,
+        [if "gender" in raw && raw.gender != '' then "gender" else null]: raw.gender,
+        [if "mobile" in raw && raw.mobile != '' then "phone" else null]: raw.mobile,
       },
     },
   }
