geek1011
/
loginsrv-oidc-provider
1
0
Fork 0
Code Releases Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
3 Commits
1 Branch
1 Tag
40 KiB
 
 
Branch: master
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'master'
${ noResults }
 ZIP  TAR.GZ
Patrick Gaskin a40c291fa1
Added build scripts 		1 year ago
.gitignore Added build scripts 1 year ago
Makefile Added build scripts 1 year ago
README.md Implemented authorization code flow, fixed a bunch of bugs 1 year ago
go.mod Initial commit 1 year ago
go.sum Implemented authorization code flow, fixed a bunch of bugs 1 year ago
main.go Implemented authorization code flow, fixed a bunch of bugs 1 year ago
provider.go Implemented authorization code flow, fixed a bunch of bugs 1 year ago

README.md

loginsrv-oidc-provider

This is a simple implementation of the bare minimum required to support using loginsrv as a OIDC 1.0 provider.

The following specs are implemented:

Most environment variables are the same as loginsrv to allow sharing configurations. The only additional configuration required is LOGINSRVOIDC_JWT_SECRET (for signing the OIDC tokens, must be RS256), LOGINSRVOIDC_CLIENTS (for specifying client IDs and redirect URIs) and LOGINSRVOIDC_LOGINSRV (for specifying the base URL of loginsrv).

The token returned is a modified version of the one returned by loginsrv, and resigned with a key specific to loginsrv-oidc-provider.

Note that there is no authorization prompt, although only registered callback URIs will be used.