picture
Registry Context
The picture claim is a URL for the End-User's profile picture. OpenID Connect Core requires the URL to point directly to an image file, and recommends that it specifically identify a suitable profile photo of the End-User.
Technical Summary
The picture claim is defined as a string URL of the End-User's profile picture in OpenID Connect Core 1.0 Section 5.1. The URL has direct target constraints: it MUST refer to an image file rather than an HTML page containing an image, and it SHOULD specifically reference a suitable profile photo of the End-User.
When Used
Used as a standard OpenID Connect profile Claim in UserInfo Responses or ID Tokens.
Normative Requirements
picture claim URL
openid-connect-core-1_0 - Section 5.1
refer to an image file rather than to a Web page containing an image.
Condition: when the picture claim is present
This URL MUST refer to an image file (for example, a PNG, JPEG, or GIF image file), rather than to a Web page containing an image.
openid-connect-core-1_0 - Section 5.1
specifically reference a profile photo of the End-User suitable for displaying when describing the End-User.
Condition: when the picture claim is present
Note that this URL SHOULD specifically reference a profile photo of the End-User suitable for displaying when describing the End-User, rather than an arbitrary photo taken by the End-User.
Validation Guidance
If validating a picture claim, verify that the value is a string URL and that the URL target is an image file rather than an HTML page containing an image.
If validating profile quality, warn when the URL does not appear to identify a suitable End-User profile photo.
Reference
Details
- Entry Id
picture- Claim Name
picture- Claim Description
Profile picture URL- Change Controller
OpenID_Foundation_ Artifact_ Binding_ Working_ Group - Reference
OpenID Connect Core 1.0 - Section 5.1