File tree Expand file tree Collapse file tree 2 files changed +336
-248
lines changed Expand file tree Collapse file tree 2 files changed +336
-248
lines changed Original file line number Diff line number Diff line change 4545 proxy_set_header Content-Type "application/x-www-form-urlencoded" ;
4646 proxy_set_header Authorization $arg_secret_basic ;
4747 proxy_pass $oidc_token_endpoint ;
48- }
48+ }
4949
5050 location = /_refresh {
5151 # This location is called by oidcAuth() when performing a token refresh. We
6262 proxy_pass $oidc_token_endpoint ;
6363 }
6464
65- location = /_id_token_validation {
66- # This location is called by oidcCodeExchange() and oidcRefreshRequest(). We use
67- # the auth_jwt_module to validate the OpenID Connect token response, as per:
68- # https://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation
65+ location = /_token_validation {
66+ # Internal location to verify any JWT (e.g., id_token, logout_token)
67+ # using the auth_jwt module. Extracts the claims and returns them as JSON.
6968 internal ;
7069 auth_jwt "" token=$arg_token ;
71- js_content oidc.validateIdToken ;
70+ js_content oidc.extractTokenClaims ;
7271 error_page 500 502 504 @oidc_error;
7372 }
7473
You can’t perform that action at this time.
0 commit comments