Wuhan University OAuth Scopes

specification: API Evangelist Scopes
specificationVersion: '0.1'
provider: Wuhan University
providerId: wuhan
generated: '2026-09-01'
method: searched
source: >-
  scopes_supported and claims_supported read verbatim from the OpenID Connect discovery document
  Wuhan University publishes at
  https://cas.whu.edu.cn/authserver/oidc/.well-known/openid-configuration (HTTP 200,
  application/json;charset=UTF-8, 1,340 bytes, fetched 2026-09-01, archived at
  authentication/wuhan-cas-oidc-openid-configuration.json). Nothing in this file is inferred or
  generated -- every value below appears in that document.
description: >-
  The only scope vocabulary Wuhan University publishes anywhere. These are the standard OpenID
  Connect 1.0 scopes as emitted by the Wisedu CAS authorization server at cas.whu.edu.cn; there
  are no institution-specific scopes, no resource scopes, and no data-API scopes, because there
  is no institution-operated data API to scope. Scopes here govern who may read a WHU identity,
  not what a client may do with WHU information.

x-operator: institution
x-operator-basis: >-
  Served from cas.whu.edu.cn (115.156.123.25, netname WHR-CERNET, Wuhan Regional Network). The
  scope SET is the OIDC standard as shipped by the supplier's product, not a WHU design -- the
  deployment is institution-operated, the vocabulary is the specification's.

issuer: https://cas.whu.edu.cn/authserver/oidc/

scopes:
- name: openid
  standard: OpenID Connect Core 1.0
  description: Required to request an ID token; identifies the request as an OIDC authentication.
- name: profile
  standard: OpenID Connect Core 1.0
  description: >-
    Releases the profile claim set the server advertises: name, preferred_username, family_name,
    given_name, middle_name, nickname, picture, website, gender, birthdate, zoneinfo, locale,
    updated_at.
- name: email
  standard: OpenID Connect Core 1.0
  description: Releases email and email_verified.
- name: address
  standard: OpenID Connect Core 1.0
  description: Releases the address claim.
- name: phone
  standard: OpenID Connect Core 1.0
  description: Releases phone_number and phone_number_verified.
- name: offline_access
  standard: OpenID Connect Core 1.0
  description: Requests a refresh token for use when the subject is not present.

claims_supported:
- sub
- name
- preferred_username
- family_name
- given_name
- middle_name
- profile
- picture
- nickname
- website
- zoneinfo
- locale
- updated_at
- birthdate
- email
- email_verified
- phone_number
- phone_number_verified
- address
- gender

observations:
- >-
  claims_supported lists given_name twice. A duplicate entry in a published discovery document
  is a small correctness defect in the artifact, and it is reproduced faithfully above minus the
  duplicate.
- >-
  No institution-defined scope exists. Every scope is the OIDC standard set, which is the
  expected shape for a campus SSO and the expected absence for an institution that operates no
  public API.