Using well-known/openid-configuration URL instead of JWK URL

[Anil Gunturu]

Is it possible to specify the .well-known/openid-configuration URL instead of JWK URL. Typically, the JWK URL is present in the openid-configuration. 

Thanks,

-Anil

[Albert Lombarte]

Hi Anil,

You must pass the URL that when KrakenD accesses it, it finds the final public keys attribute for verification. You can see an example of how it looks like here https://albert-test.auth0.com/.well-known/jwks.json

For instance, in Keycloak you will need to specify soemthing like this:

"auth/validator": {

    "alg": "RS256",

    "jwk_url": "http://KEYCLOAK:8080/auth/realms/master/protocol/openid-connect/certs",

    "disable_jwk_security": true

}

Note: disable jwk flag is set when the protocol is not HTTPS but HTTP instead.

El dia dimarts, 6 de setembre de 2022 a les 17:02:52 UTC+2, anil.g...@gmail.com va escriure: