hashicorp / hashicorp/vault-plugin-auth-jwt

Support Client Auth Certificate in OIDCTokenRequest Endpoint

Open
#93 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
107
Forks
73
Avg merge
13h 49m
Merged PRs (30d)
7

Description

OIDC Providers support multiple options to request for Token with authorization code . Current implement only supports ClientSecret. Requesting to add support for 2 way SSL Client Support by enabling one more additional parameter . So that we have an option to use either ClientSecret or 2 way SSL Token Request Call.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the OIDCTokenRequest endpoint and the existing ClientSecret token-request handling in the Go plugin. Trace how the endpoint builds its authorization-code token request, then determine the configuration and request path needed to support client-certificate authentication alongside ClientSecret. Done means either authentication option can be used successfully.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
api, authentication
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.