hashicorp / hashicorp/vault-plugin-auth-jwt
Support Client Auth Certificate in OIDCTokenRequest Endpoint
- Dominant language
- Go
- Stars
- 107
- Forks
- 73
- Avg merge
- 13h 49m
- Merged PRs (30d)
- 7
Description
OIDC Providers support multiple options to request for Token with authorization code . Current implement only supports ClientSecret. Requesting to add support for 2 way SSL Client Support by enabling one more additional parameter . So that we have an option to use either ClientSecret or 2 way SSL Token Request Call.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the OIDCTokenRequest endpoint and the existing ClientSecret token-request handling in the Go plugin. Trace how the endpoint builds its authorization-code token request, then determine the configuration and request path needed to support client-certificate authentication alongside ClientSecret. Done means either authentication option can be used successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- api, authentication
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100