Well known openid configuration contains http urls

obiba / agate

OBiBa's user ID provider.

GNU General Public License v3.0

4 stars 7 forks source link

Well known openid configuration contains http urls #523

Closed ymarcon closed 9 months ago

ymarcon commented 9 months ago

The OpenID Connect discovery service returns the oidc configuration, see for example https://agate-demo.obiba.org/.well-known/openid-configuration

As the same agate server can be used from different addresses, this config is dynamically built from the request, but the scheme of this request java object is reported to be http in place of https, confusing the following oidc process.

ymarcon commented 9 months ago

Fixed by 123bc44e86985b22758d814ee8b86c3e1e9e22e3