From 0d286d1864f5dc88d21d82a306d291f00ee79053 Mon Sep 17 00:00:00 2001
From: Scott McKendry <me@scottmckendry.tech>
Date: Wed, 8 Apr 2026 10:28:38 +1200
Subject: [PATCH] feat(oidc): add post route for /userinfo (#767)

easy two-liner to pass `oidcc-userinfo-post-header` test in conformance
suite.
---
 internal/controller/oidc_controller.go    | 1 +
 internal/middleware/context_middleware.go | 1 +
 2 files changed, 2 insertions(+)

diff --git a/internal/controller/oidc_controller.go b/internal/controller/oidc_controller.go
index 81708a1..6b9c973 100644
--- a/internal/controller/oidc_controller.go
+++ b/internal/controller/oidc_controller.go
@@ -70,6 +70,7 @@ func (controller *OIDCController) SetupRoutes() {
 	oidcGroup.POST("/authorize", controller.Authorize)
 	oidcGroup.POST("/token", controller.Token)
 	oidcGroup.GET("/userinfo", controller.Userinfo)
+	oidcGroup.POST("/userinfo", controller.Userinfo)
 }
 
 func (controller *OIDCController) GetClientInfo(c *gin.Context) {
diff --git a/internal/middleware/context_middleware.go b/internal/middleware/context_middleware.go
index e2ae45b..025c64e 100644
--- a/internal/middleware/context_middleware.go
+++ b/internal/middleware/context_middleware.go
@@ -24,6 +24,7 @@ var (
 		"GET /api/oidc/clients",
 		"POST /api/oidc/token",
 		"GET /api/oidc/userinfo",
+		"POST /api/oidc/userinfo",
 		"GET /resources",
 		"POST /api/user/login",
 		"GET /.well-known/openid-configuration",