From 748b83f4a0b434eaffd350a6470debf342b6f0c8 Mon Sep 17 00:00:00 2001
From: Tueem <tueem@tomatentum.net>
Date: Wed, 24 Jun 2026 11:36:47 +0200
Subject: [PATCH] fix(auth): change username claim to preferred_username

---
 internal/auth/routes.go | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/internal/auth/routes.go b/internal/auth/routes.go
index b66d8a8..c2fac32 100644
--- a/internal/auth/routes.go
+++ b/internal/auth/routes.go
@@ -78,7 +78,15 @@ func CallbackHandler(mux *http.ServeMux) {
 			return
 		}
 
-		jwt, err := NewJWT(idtoken.Subject)
+		var UsernameClaim struct {
+			PreferredUsername string `json:"preferred_username"`
+		}
+		if err := idtoken.Claims(&UsernameClaim); err != nil {
+			http.Error(w, err.Error(), http.StatusBadRequest)
+			return
+		}
+
+		jwt, err := NewJWT(UsernameClaim.PreferredUsername)
 
 		if err != nil {
 			http.Error(w, err.Error(), http.StatusInternalServerError)