From 5aab74089ea1f1e619f45da13901225814e9cf58 Mon Sep 17 00:00:00 2001
From: Scott McKendry <me@scottmckendry.tech>
Date: Wed, 8 Apr 2026 10:14:59 +1200
Subject: [PATCH] feat(oidc): add post route for /userinfo

easy one-liner to pass `oidcc-userinfo-post-header` test in conformance
suite.
---
 internal/controller/oidc_controller.go    | 1 +
 internal/middleware/context_middleware.go | 1 +
 2 files changed, 2 insertions(+)

diff --git a/internal/controller/oidc_controller.go b/internal/controller/oidc_controller.go
index 81708a17..6b9c9736 100644
--- a/internal/controller/oidc_controller.go
+++ b/internal/controller/oidc_controller.go
@@ -70,6 +70,7 @@ func (controller *OIDCController) SetupRoutes() {
 	oidcGroup.POST("/authorize", controller.Authorize)
 	oidcGroup.POST("/token", controller.Token)
 	oidcGroup.GET("/userinfo", controller.Userinfo)
+	oidcGroup.POST("/userinfo", controller.Userinfo)
 }
 
 func (controller *OIDCController) GetClientInfo(c *gin.Context) {
diff --git a/internal/middleware/context_middleware.go b/internal/middleware/context_middleware.go
index e2ae45b2..025c64ec 100644
--- a/internal/middleware/context_middleware.go
+++ b/internal/middleware/context_middleware.go
@@ -24,6 +24,7 @@ var (
 		"GET /api/oidc/clients",
 		"POST /api/oidc/token",
 		"GET /api/oidc/userinfo",
+		"POST /api/oidc/userinfo",
 		"GET /resources",
 		"POST /api/user/login",
 		"GET /.well-known/openid-configuration",