lua-resty-openidc

lua-resty-openidc copied to clipboard

Support bearer token authorization method for introspection endpoint

11

###### Environment - lua-resty-openidc version (e.g. 1.7.0) - OpenID Connect provider (e.g. Keycloak, Azure AD) ###### Expected behaviour In simple version: 1. Config: `opts.token_endpoint_auth_method = "bearer_token"` 2. With above config,...

linhdangduy

Support token_type_hint for introspection endpoint

3

Is there any interest in supporting the optional `token_type_hint` parameter in the token introspection request? See: https://tools.ietf.org/html/rfc7662#section-2.1 I have this working on my fork, would just need to clean it...

jerneyio

Refreshing tokens on non-GET requests

3

###### Environment - lua-resty-openidc version 1.7.0 - OpenID Connect provider Keycloak 4.1.0.Final ###### Expected behaviour It could be nice to have possibility continue user request in oryginal form. ###### Actual...

ghost

Multiple Providers

7

Hi guys, Zmartzone apache module has a [Multiple Provider](https://github.com/zmartzone/mod_auth_openidc/wiki/Multiple-Providers) feature which is super useful. Do you have a recommendation how I can achieve that with some nginx config combined with...

sooslaca

documentation of all configuration parameters

2

there are some well-documented example configurations, but is there also a *documentation*, i.e. a list of all possible configuration parameters?

thewilli

Azure AD JWT groups/roles example

1

Can you please provide an example of Azure AD integration with group/roles claims from JWT? https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-protocols-oauth-code Thanks

lukasmrtvy

Support "private_key_jwt" client authentication

4

I would need to support "private_key_jwt" client authentication. Is it possible to get this added? Or get help to implement it. Ideally there would be functionality to: 1) generate the...

fabled

Hi Team, I am trying to setup a configuration to deny with 401 Http Response for Backend-API calls from Frontend in case the token session has expired.. I am using...

ravaidly

###### Environment - lua-resty-openidc - Nginx access by lua block ###### redirecturl after resty.openidc authentication should not have session_state/hide session_state ###### session_state present in redirect url

hemahhari

Authentication with Keycloak in Lua makes redirection loops

14

Hi, First, I would like to explain my current setup. Nginx is stalled in both **Server-1** and **Server-2**. **Server-1** is the main reverse proxy. **Server-2** is where the Lua script...

ThihaM2G