From c91c76f89f8c28781fc52db8043abef4ccb2e620 Mon Sep 17 00:00:00 2001
From: mod242 <40213799+mod242@users.noreply.github.com>
Date: Thu, 22 Jan 2026 17:47:31 +0100
Subject: [PATCH] Make Picture / Avatar available

---
 server/modules/authentication/oidc/authentication.js | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/server/modules/authentication/oidc/authentication.js b/server/modules/authentication/oidc/authentication.js
index 4c7383e4..f010e6b8 100644
--- a/server/modules/authentication/oidc/authentication.js
+++ b/server/modules/authentication/oidc/authentication.js
@@ -24,6 +24,10 @@ module.exports = {
         acrValues: conf.acrValues
       }, async (req, iss, uiProfile, idProfile, context, idToken, accessToken, refreshToken, params, cb) => {
         const profile = Object.assign({}, idProfile, uiProfile)
+        const picture = _.get(profile, 'picture',
+          _.get(profile, '_json.picture',
+            _.get(profile, '_json.avatar',
+              _.get(profile, '_json.profile.picture', _.get(profile, '_json.profile.avatar', '')))))
 
         try {
           const user = await WIKI.models.users.processProfile({
@@ -31,7 +35,8 @@ module.exports = {
             profile: {
               ...profile,
               email: _.get(profile, '_json.' + conf.emailClaim),
-              displayName: _.get(profile, '_json.' + conf.displayNameClaim, '')
+              displayName: _.get(profile, '_json.' + conf.displayNameClaim, ''),
+              picture
             }
           })
           if (conf.mapGroups) {