title: How to pass user's claim to upstream layer using mod_auth_openidc?
body: <p>I've successfully provisioned apache web server using mod_auth_openidc to protect our internal dashboards, using Auth0 and Google App Oauth, described in this documentation:
  - <a href="https://github.com/zmartzone/mod_auth_openidc#openid-connect-sso-with-google-sign-in" rel="nofollow noreferrer">https://github.com/zmartzone/mod_auth_openidc#openid-connect-sso-with-google-sign-in</a>
  - <a href="https://auth0.com/docs/quickstart/webapp/apache/01-login" rel="nofollow noreferrer">https://auth0.com/docs/quickstart/webapp/apache/01-login</a> (without using auth0 rule pipeline)</p>
  
  <p>My question is how to pass the user's claim to the upstream layer (our internal tools/dashboards) as http header? Is it possible?</p>
  
  <p>Regards,
  Agung</p>
  
  <p><strong>UPDATED</strong></p>
  
  <p>I've tried with the suggestion <a href="https://stackoverflow.com/a/52621568/476917">here</a>, 
  here's the snippet of my /etc/apache2/sites-available/000-default.conf </p>
  
  <pre><code>&lt;VirtualHost *:443&gt;
  ServerName my-host-name
  UseCanonicalName on
  ProxyPreserveHost on
  DocumentRoot /var/www/html
  
  
  # Pass the user's claim as http headers
  OIDCPassClaimsAs "headers"
  OIDCPassUserInfoAs "claims"
  OIDCPassRefreshToken "On"
  &lt;Location /&gt;
    AuthType openid-connect
  
    &lt;RequireAll&gt;
      Require claim email~^(.*)@domain.com$
      Require claim email_verified:true
    &lt;/RequireAll&gt;
  
  
    ProxyPass http://echo-server.default.svc.cluster.local:8080/
    ProxyPassReverse http://echo-server.default.svc.cluster.local:8080/
    LogLevel debug
  
  &lt;/Location&gt;
  &lt;/VirtualHost&gt;
  </code></pre>
  
  <p>I am using echoserver (gcr.io/google_containers/echoserver:1.0) as the backend of <a href="http://echo-server.default.svc.cluster.local:8080" rel="nofollow noreferrer">http://echo-server.default.svc.cluster.local:8080</a>, and it doesn't print any user's claim as http headers. Is there any misconfiguration on my part? How to debug this problem?</p>