New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OpenID Connect Federation support #370

Open

ericchiang opened this issue Mar 22, 2023 · 0 comments

Collaborator

ericchiang commented Mar 22, 2023

This is a tracking issue for OpenID Connect's federation proposal: https://openid.net/specs/openid-connect-federation-1_0.html

While this came up in #368 (support for signed_jwks_uri), there's a lot going on in that doc, such as X.509 style certificate chains.

I've opened this bug to figure out:

What providers plan to implement this doc.
If go-oidc should support this (and what portions of the spec?).
What the architecture and threat model is for the federation document.

Providers that support aspects of this doc:

https://github.com/op-developer/Identity-Service-Broker-API plans to support signed_jwks_uri

For now, I'm encouraging users who want to try this out to use our extension points. E.g. signed_jwks_uri should use our KeySet interface.

ericchiang mentioned this issue

Support signed JWKs #368

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment