search

evry / docker-oidc-proxy

Docker Image built on Alpine Linux for secure OpenID Connect (OIDC) proxy authentication
https://hub.docker.com/r/evry/oidc-proxy/
MIT License
121 stars 59 forks source link

lua-resty-openidc and checking issuer #7

Open johndrummond opened 5 years ago

johndrummond commented 5 years ago

lua-resty-openidc version 1.7.0 removes a check where lua-resty-openidc requires issuer to be == to the discovery URL domain https://github.com/zmartzone/lua-resty-openidc/issues/219

The check can be a problem with working with Azure AD e.g. https://github.com/zhzy0077/lua-resty-openidc-azure-ad/commit/18bd9045de1cf9fafa772b77c226b9f436893807

Any chance of updating the version of openIDC used to 1.7.0 in the DockerFile so it works with Azure OpenID Connect? Assuming I've not misunderstood something. Thanks. John.

johndrummond commented 5 years ago

Ah. 1.7.0 doesn't have the change in it when you download it Only as of 2018-12-09 the latest Master branch does have it, which doesn't yet have a version tag. So whatever the change is after 1.7.0 once they release it.

johndrummond commented 5 years ago

Also fwiw the pingidentity gets redirected to zmarzone on github