search

italia / spid-cie-oidc-django

The SPID/CIE OIDC Federation SDK, written in Python
Apache License 2.0
27 stars 28 forks source link

[Entity] separate jwks #218

Closed peppelinux closed 2 years ago

peppelinux commented 2 years ago

At this moment in the entity configuration model we have a single attribute called jwks, that's a list (array) on many jwk.

this is isued for both federation and oidc core operation.

this is not good. We'll implement the best practice to have the oidc core jwk separated from the oidc fed one. the jwks attribute will be separated in

jwks_core jwks_fed

to distinguish their scopes. nothing prevent to share the same jwk for bot oidc fed and core, but by default it won't be so

peppelinux commented 2 years ago

Addes some warning messages on invalid operations on disalinged jwks https://github.com/italia/spid-cie-oidc-django/commit/c4722adebbe07e16b326ca48a08a35fa7bdea27e https://github.com/italia/spid-cie-oidc-django/commit/5e14c320a1c8f0041267935940bda78af5d099cf

peppelinux commented 2 years ago

Done in v0.7.0. https://github.com/italia/spid-cie-oidc-django/releases/tag/v0.7.0