Provide openid-configuration and certificate as JWK to meet OpenID 1.0 specs

Created on 7 March 2018, over 6 years ago
Updated 18 April 2024, 2 months ago

Problem:
This module does not provide ".well-known/openid-configuration" and server certificates in "jwks" style as it's required by the Open ID 1.0 specs.

Suggested solution:
1. Let the existing "oauth2/certificates" unchanged to be compatible on old implementations and provide a second path which in "jwks"-style.
2. Provide a single or multiple JSON files on ".well-known/openid-configuration" or "path-n/.well-known/openid-configuration" or just an JSON file creator for a manual copy.

The "openid-configuration" can be provide manually but the certificate is changing often via cron. So this is more important to be realized.

Old Issue description by @rdhiman:

Dear Drupal Team,

I am using OAuth2 Server 8.x-1.0-beta1 with Drupal-8.4.5 and I did not found such url that return well-known/keys, well-known/openid-configuration.

Can we have below information on any restful urls like these?

jwk_uri -
http://mysite.com/.well-known/keys

well_known_uri -
http://mysite.com/.well-known/openid-configuration/

Please suggest how can we get this information. This is very crucial to go ahead.
Or you may suggest any other work around to achieves this.

✨ Feature request
Status

Fixed

Version

2.0

Component

Code

Created by

🇮🇳India rdhiman

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.69.0 2024