meateam / OSpike

An OAuth2 authorization server supporting OpenID Connect
MIT License
2 stars 0 forks source link

Support applications with multiple servers #66

Closed shakedmanes closed 5 years ago

shakedmanes commented 5 years ago

Problem Description:

Let's say we have an application with more than one server (for better maintenance or behind a reverse proxy). The application would want to add multiple servers hostnames (AKA 'hostUri') instead of creating multiple clients (harder to manage and stabilize). Also for each of the servers, we should need different 'redirectUris'.

Solution:

Adding option when creating client to specify multiple hostUri's and redirectUris, also checking each hostUri entered has appropriate redirectUri. IMPORTANT: Also when some OAuth2 flow occurres need to check the appropiate redirectUri in the request is following to the requester hostUri.