Skip to content

Create ClientRegistration from OIDC Discovery #4413

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
jgrandja opened this issue Jun 22, 2017 · 1 comment · Fixed by #5355
Closed

Create ClientRegistration from OIDC Discovery #4413

jgrandja opened this issue Jun 22, 2017 · 1 comment · Fixed by #5355
Assignees
@rwinch
Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) type: enhancement A general enhancement
Milestone
5.1.0.M2

Comments

@jgrandja
Copy link
Contributor

OpenID Connect clients should be capable of discovering Provider information, as defined by the OpenID Connect Discovery 1.0 specification.

This feature will greatly simplify the manual configuration of an OIDC client.
@jgrandja jgrandja added the in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) label Jun 22, 2017
@jgrandja jgrandja added this to the 5.0.0.M3 milestone Jun 22, 2017
@jgrandja jgrandja self-assigned this Jun 22, 2017
@jgrandja jgrandja changed the title OIDC clients should be able to dynamically discover provider metadata OIDC clients can dynamically discover provider metadata Jun 22, 2017
@jgrandja jgrandja added the OIDC label Jul 5, 2017
@jgrandja jgrandja modified the milestones: 5.0.0.M3, 5.0.0.M4 Jul 24, 2017
@jgrandja jgrandja mentioned this issue Aug 15, 2017
Closed
28 tasks
@jgrandja jgrandja removed this from the 5.0.0.M4 milestone Sep 13, 2017
@jgrandja
Copy link
Contributor Author

jgrandja commented Oct 26, 2017 •
edited
Loading

Related #4440 - complete below outstanding tasks after this issue is resolved

  • Validate the iss (issuer) Claim on the ID Token
  • Validate the alg value SHOULD be the default of RS256 or the algorithm sent by the Client in the id_token_signed_response_alg parameter during registration

@rwinch rwinch added this to the 5.1.0.M1 milestone Nov 16, 2017
@jgrandja jgrandja removed their assignment Nov 28, 2017
@rwinch rwinch modified the milestones: 5.1.0.M1, 5.1.0.RC1 Dec 19, 2017
@rwinch rwinch mentioned this issue Mar 26, 2018
Closed
@jgrandja jgrandja changed the title OIDC clients can dynamically discover provider metadata OIDC Client supports OpenID Connect Discovery Mar 26, 2018
@rwinch rwinch self-assigned this May 16, 2018
rwinch added a commit to rwinch/spring-security that referenced this issue May 16, 2018
@rwinch
Add ClientRegistration from OpenID Connect Discovery
0598d47 
Fixes: spring-projectsgh-4413
@rwinch rwinch mentioned this issue May 16, 2018
Merged
rwinch added a commit to rwinch/spring-security that referenced this issue May 18, 2018
@rwinch
Add ClientRegistration from OpenID Connect Discovery
88f31ff 
Fixes: spring-projectsgh-4413
@rwinch rwinch mentioned this issue May 18, 2018
Closed
@rwinch rwinch changed the title OIDC Client supports OpenID Connect Discovery Create ClientRegistration from OIDC Discovery Jul 27, 2018
@rwinch rwinch added the type: enhancement A general enhancement label May 3, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@rwinch rwinch

Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) type: enhancement A general enhancement
Projects
None yet
Milestone
5.1.0.M2
Development

Successfully merging a pull request may close this issue.

Add ClientRegistration from OpenID Connect Discovery rwinch/spring-security
2 participants
@rwinch @jgrandja