CAS-OIDC Introspection Response

[Leo Pintos]

Hi all!

I'm working with CAS 5.2.3 and I'm trying to configure the instropection behavior and its response (cas/oidc/introspect)

Next, the question:

Can I configure CAS to return the "username" in the instropection response? 

Now, the response is the next:

{"active":true,

"sub":"client_test",

"scope":"openid",

"iat":1537193418105,

"exp":1500,

"realmName":"",

"uniqueSecurityName":"client_test",

"tokenType":"bearer",

"aud":"client_test",

"iss":"https://server/cas/oidc",

"client_id":"client_test",

"grant_type":"password"

} 

Besides, 

Can I configure CAS to return different error codes when the token is wrong? 

Always return 500 and we can't handle different cases like token expiration and invalid token.

Thank in advance.

Leo.