Well-known endpoints in the private container are available without auth

TeskaLabs / seacat-auth

SeaCat Auth provides authentication, authorization, identity management, session management and other access control features.

GNU General Public License v3.0

11 stars 6 forks source link

Closed byewokko closed 6 months ago

byewokko commented 6 months ago

Well-known endpoints must be accessible without any authentication, even in the private container
/.well-known/jwks.json - JSON Web Key Set (the server's public keys)
/.well-known/openid-configuration - OpenID Connect provider metadata