libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions

Add jwks_uri to list of endpoints (Spring OAuth2)

Browse source 
When configuring Spring OAuth2, we need the jwk-set-uri for the provider. Needed some digging to find it, so I thought I'd add this information here.
This commit is contained in:
dxmann73 2020-11-08 10:45:57 +01:00 committed by Stian Thorgersen
parent 5ca5ee0b3c
commit 5955d2d48a
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
server_admin/topics/sso-protocols/oidc.adoc
View file

@ -94,7 +94,9 @@ More info together with example is in <<_service_accounts,Service Accounts>> cha
Here's a list of OIDC endpoints that the {project_name} publishes. These URLs are useful if you are using a non-{project_name} client adapter to Here's a list of OIDC endpoints that the {project_name} publishes. These URLs are useful if you are using a non-{project_name} client adapter to
talk OIDC with the auth server. These are all relative URLs and the root of the URL being the HTTP(S) protocol, hostname, and usually path prefixed with talk OIDC with the auth server. These are all relative URLs and the root of the URL being the HTTP(S) protocol, hostname, and usually path prefixed with
_/auth_: i.e. $$https://localhost:8080/auth$$ _/auth_: i.e. $$https://localhost:8080/auth$$.
You can also find these endpoints under "OpenID Endpoint Configuration" in your realm settings.
/realms/{realm-name}/protocol/openid-connect/auth:: /realms/{realm-name}/protocol/openid-connect/auth::
This is the URL endpoint for obtaining a temporary code in the Authorization Code Flow or for obtaining tokens via the This is the URL endpoint for obtaining a temporary code in the Authorization Code Flow or for obtaining tokens via the
@ -107,5 +109,7 @@ _/auth_: i.e. $$https://localhost:8080/auth$$
This is the URL endpoint for the User Info service described in the OIDC specification. This is the URL endpoint for the User Info service described in the OIDC specification.
/realms/{realm-name}/protocol/openid-connect/revoke:: /realms/{realm-name}/protocol/openid-connect/revoke::
This is the URL endpoint for OAuth 2.0 Token Revocation described in https://tools.ietf.org/html/rfc7009[RFC7009]. This is the URL endpoint for OAuth 2.0 Token Revocation described in https://tools.ietf.org/html/rfc7009[RFC7009].
/realms/{realm-name}/protocol/openid-connect/certs::
This is the URL endpoint for the JSON Web Key Set (JWKS) containing the public keys used to verify any JSON Web Token (jwks_uri)
In all of these replace _{realm-name}_ with the name of the realm. In all of these replace _{realm-name}_ with the name of the realm.