summaryrefslogtreecommitdiff
path: root/docs/content/configuration/identity-providers/openid-connect/clients.md
diff options
context:
space:
mode:
authorJames Elliott <james-d-elliott@users.noreply.github.com>2024-03-27 22:25:35 +1100
committerGitHub <noreply@github.com>2024-03-27 22:25:35 +1100
commitab4d14c890bc2f79a1f7e684746bc5659c819356 (patch)
tree2e6e899c04fce2085eca345b13e64d9723657fa9 /docs/content/configuration/identity-providers/openid-connect/clients.md
parente9444182077fe324ffc8c4988aad4aad7a96d2a8 (diff)
fix(configuration): missing request_uris option (#7033)
This fixes a missing option for OpenID Connect 1.0 clients 'request_uris'. This feature was effectively implemented but no way to configure it existed. Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
Diffstat (limited to 'docs/content/configuration/identity-providers/openid-connect/clients.md')
-rw-r--r--docs/content/configuration/identity-providers/openid-connect/clients.md11
1 files changed, 11 insertions, 0 deletions
diff --git a/docs/content/configuration/identity-providers/openid-connect/clients.md b/docs/content/configuration/identity-providers/openid-connect/clients.md
index d9864820b..2545229b4 100644
--- a/docs/content/configuration/identity-providers/openid-connect/clients.md
+++ b/docs/content/configuration/identity-providers/openid-connect/clients.md
@@ -36,6 +36,8 @@ identity_providers:
public: false
redirect_uris:
- 'https://oidc.example.com:8080/oauth2/callback'
+ request_uris:
+ - 'https://oidc.example.com:8080/oidc/request-object.jwk'
audience:
- 'https://app.example.com'
scopes:
@@ -201,6 +203,15 @@ their redirect URIs are as follows:
2. The redirect URIs are case-sensitive.
3. The URI must include a scheme and that scheme must be one of `http` or `https`.
+### request_uris
+
+{{< confkey type="list(string)" required="no" >}}
+
+A list of URIs which can be used for the OpenID Connect 1.0 Request Object to pass Authorize Request parameters via a
+JSON Web Token remote URI using the `request_uri` parameter.
+
+These URIs must have the `https` scheme.
+
### audience
{{< confkey type="list(string)" required="no" >}}