search

nokia / kong-oidc

OIDC plugin for Kong
Apache License 2.0
454 stars 320 forks source link

Absolute URI redirect_uri_path #93

Open ronaldxl opened 5 years ago

ronaldxl commented 5 years ago

Hi, This is a question, not a issue with the plugin.

There is an option to configure the redirect_uri_path like absolute URI?

something like this:

redirect_uri_path: "/auth/secure"
redirect_uri_path: "https://my_domain.org/kong/auth/secure"
Trojan295 commented 5 years ago

To be honest, I've never tried, but according to the docs of lua-resty-openid, which this plugin is using:

redirect_uri = "https://MY_HOST_NAME/redirect_uri",
             -- up until version 1.6.1 you'd specify
             -- redirect_uri_path = "/redirect_uri",
             -- and could not set the hostname

it's not possible with redirect_uri_path. In 1.6.1 they changed it, but this plugin is currently using 1.6.0. So the answer is no, until we upgrade lua-resty-openid to 1.6.1 or newer.

ronaldxl commented 5 years ago

Thank you for answering. That's right, the lua-resty-openid version supports that configuration. In a fork project I tried version 1.7.x. In fact, version 1.6 has a problem with URL encoding when token_endpoint_auth_method = client_secret_basic. But that's another matter.