search

italia / spid-cie-oidc-django

The SPID/CIE OIDC Federation SDK, written in Python
Apache License 2.0
27 stars 28 forks source link

[Design error] Provider metadata with jwks_uri #233

Closed peppelinux closed 2 years ago

peppelinux commented 2 years ago

In the example project we have a OIDC Provider configured with jwks in its metadata Unfortunately OIDC Discovery Provider only supports jwks_uri (!).

I try to push this claim in oidc fed specs but I'm not optmist https://bitbucket.org/openid/connect/issues/1479/federation-metadata-jwks-claim

once the oidc fed issues will be closed/rejected I'll refactor the examples

peppelinux commented 2 years ago

Federation DRAFT 19 enables the claim jwks in the OP metadata and this is fully compliant with the current implementation

https://openid.bitbucket.io/connect/openid-connect-federation-1_0.html#rfc.section.4.2