Timo Stark

Results 134 comments of Timo Stark

Hi sharma-manish - thanks for reaching out. Why do you think it requires session stickiness? The key-value-store used should be in sync with all cluster nodes. So that given it...

I understand your point. So the request would be to be able to turn the opaque cookie on and off. So the access_token will be send as a cookie instead...

Thanks for your feedback. This sounds like a good enhancement to our existing implementation

Hi @wongkeewee , thanks for reporting that issue in that detail! That definitely helped us to investigate the issue. As the variable value assigned by a `map` will be assigned...

The `js_var $ruri $uri; ` can be set anywhere in the `http` context of your configuration. Can you please share the debug log one more time. If possible upload it...

Hi @b-rajesh sorry for the late response. As discussed back in July I do not have any security concerns disabling the jwt protection for the locations handling the authentication. Did...

Not without modifying the code a little bit. https://github.com/nginxinc/nginx-openid-connect/blob/db991ecb83e1b388e1ae74bf5e16dd4a6eb4e6d0/openid_connect.js#L262 If PKCE is in use the state value is already be in use for the `pkce_id` value. If you are not...

If it`s just about sending additional URI params to the IdP you can simply change the NGINX configuration and send them along. https://github.com/nginxinc/nginx-openid-connect/blob/db991ecb83e1b388e1ae74bf5e16dd4a6eb4e6d0/openid_connect.server_conf#L42 Handling new params at `codexch` can be...

Sorry for the late response. Can you share some more Information about your architecture? Feel free to use example domains but I would like to better understand the use case...

Hi @Dawoodkhorsandi If I understand you correctly you would like to stop the container? In this case you should talk to the docker control socket. But I would do this...