hashicorp / hashicorp/vault-plugin-auth-jwt

OIDC should support Authorization,Token and Userinfo endpoints if well-known configuration endpoint is not present on provider

Open
#169 1 comment 1 reaction 0 assignees View on GitHub
Dominant language
Go
Stars
107
Forks
73
Avg merge
13h 49m
Merged PRs (30d)
7

Description

While configuring OIDC provider i encounter that provider it doesnt expose /.well-known/openid-configuration endpoint. But it has all Authorization endpoint ,Token endpoint and Userinfo endpoint. But current implementation doesn't support it.

Can you please support to overwrite these endpoint in vault auth configuration

Contributor guide

No contributing guide indexed for this repository

Research direction

Start at the OIDC provider configuration and discovery path, then trace how authorization, token, and userinfo endpoints are currently sourced. Done means the configuration can override all three endpoints when the provider lacks /.well-known/openid-configuration, with tests covering that provider setup.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.