search

cjww-development / gatekeeper

Implementation of OIDC and OAuth2
Apache License 2.0
16 stars 0 forks source link

JWKs endpoint field in well known config response not conforming to OIDC spec #38

Closed chrisjwwalker closed 3 years ago

chrisjwwalker commented 3 years ago

Describe the bug When reviewing the response of the well known config endpoint at /gatekeeper/api/.well-known/openid-configuration the endpoint to get jwks should be jwks_uri as described in section 3 on the spec. At the moment the field is labelled jwks_endpoint.

To Reproduce Steps to reproduce the behaviour:

  1. Go to <DOMAIN>/gatekeeper/api/.well-known/openid-configuration (domain is wherever your gatekeeper instance lives)
  2. Look at jwks_endpoint
  3. See error

Expected behavior jwks_endpoint should be labelled jwks_uri.