Allow an OIDC issuer to not have to be a valid URL, as string values are allowed
Open
@Joe-Winchester is already working on this.
Since Jul 8, 2025.
enhancement
help-wanted
Priority: High
size/M
- Dominant language
- Java
- Stars
- 92
- Forks
- 81
- Avg merge
- 1d 9h
- Merged PRs (30d)
- 46
Description
Is your feature request related to a problem? Please describe.
We have an OIDC token where the issuer is a string that isn't a URL to a JWKS. This is failing in
org.zowe.apiml.security.common.token.QueryResponse: public static Source valueByIssuer(String issuer) {
Describe the solution you'd like
Allow any non blank value to come in the issuer
Willingness to help
We will provide a PR with the code modification
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.