Skip to content

oidc without auto discovery #16467

Closed as not planned
Closed as not planned
@ecourreges-orange

Description

Component(s)

extension/oidcauth

Is your feature request related to a problem? Please describe.

I have an oauth2 client credentials flow auth server with JWT and should work with oidcauth / go-oidc, but doesn't currently provide the file .well-known/openid-configuration, so I see no way to make it work with the current code as of 0.64.0

All api software we use has allowed setting oidc settings manually which means the auth server never needed to implement auto discovery. Usually on api services, we configure only the jwks uri and the scope to be verified (which will also need to be added here for us to be safe).

Describe the solution you'd like

I am lobbying in my company for them to provide this discovery info, but I was wondering
if it would make sense to add manual optional settings such as jwks_uri?, and other params from the other NewProvider implementation in go-oidc.

Describe alternatives you've considered

In the mean time, I will try and see if I can get some code to work with these modifications, and if it does, I may come up with a more detailed proposal.
I don't see any other usable/maintainable authentication scheme for my use case.

Additional context

No response

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions