lua-resty-openidc

lua-resty-openidc copied to clipboard

Redirect back after scope validation failure

1

Question related to token validation: In the example given: ``` if res.scope ~= "edit" then ngx.exit(ngx.HTTP_FORBIDDEN) end ``` How would the user be redirect back to relevant openid-connect/auth end point...

lewismoore10100

Migrate lua-resty-session to 4.0.3

13

Fixes #464

balajiv113

guesstimate for release of lua-resty-session 4.0.3

1

This is a question. I have seen that there is pull request [489](https://github.com/zmartzone/lua-resty-openidc/pull/489) to change lua-resty-session to 4.0.3. Can you please give a guesstimate when this should be expected to...

sockejr

How to modify session parameters?

7

Hi, I have the "no session state found" problem. Keycloak seems to set the [same site policy to strict](https://github.com/keycloak/keycloak/issues/19886) and it seems google Chrome will enforce that at some point,...

netchild

enc_id_token vs id_token

1

Why is enc_id_token separated from id_token? It looks like its being set the same way [here](https://github.com/zmartzone/lua-resty-openidc/blob/master/lib/resty/openidc.lua#L1395). I assume `enc` means encrypted? It doesn't seem so as for how it is...

heidingeww

Discovery Using Self-Signed Cert

1

I am doing local testing using Docker and Keycloak. I want to test the whole setup using self-signed certificates to replicate a production environment. The lua HTTP script seems to...

petercinibulk

###### Environment - lua-resty-openidc version 1.7.6 - JupyterHub OAuth Provider (https://jupyterhub.readthedocs.io/en/stable/explanation/oauth.html) ###### Expected behaviour The OAuth provider I am using mandates that the redirect_uri be a relative path (`/user/${user}/oauth_callback`), and...

voronin-ilya

Redirect uri / to /doc

1

###### Environment - lua-resty-openidc version (e.g. 1.7.6) - OpenID Connect provider (e.g. Keycloak, Azure AD) lua-resty-openidc version 1.7.6 OpenID Connect provider keycloak ###### Expected behaviour Go to https://172.18.157.158:19999/ to jump...

JokerDevops

1.7.6 not released to openresty package manager

13

Hi there, I think you didn't release the latest version 1.7.6 to opm yet! not sure if that was intentional. Also this commit is needed https://github.com/zmartzone/lua-resty-openidc/commit/4b9316403e1d6a162aecea86c466f50fe78232e8 to be released since...

Clivern

Failure revoking tokens when calling revocation endpoint using client secret signed JWT

2

###### Environment - lua-resty-openidc version: 1.7.6-3 - OpenID Connect provider: Keycloak 22.0.0 ###### Expected behaviour logout should revoke access and refresh tokens successfully with keycloak when using client secret signed...

jfhenriques