CadolesKube/hydra-maester
7
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat: add jwks uri (#126)

Browse Source
This commit is contained in:
Jordan Labrosse 2023-08-10 07:49:28 +02:00 committed by GitHub
parent 5f7526bbaf
commit d5caace0e3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
api/v1alpha1/oauth2client_types.go
View File

@ -116,6 +116,12 @@ type OAuth2ClientSpec struct {
// //
// Metadata is abritrary data // Metadata is abritrary data
Metadata apiextensionsv1.JSON `json:"metadata,omitempty"` Metadata apiextensionsv1.JSON `json:"metadata,omitempty"`
// +kubebuilder:validation:type=string
// +kubebuilder:validation:Pattern=`(^$|^https?://.*)`
//
// JwksUri Define the URL where the JSON Web Key Set should be fetched from when performing the private_key_jwt client authentication method.
JwksUri string `json:"jwksUri,omitempty"`
} }
// +kubebuilder:validation:Enum=client_credentials;authorization_code;implicit;refresh_token // +kubebuilder:validation:Enum=client_credentials;authorization_code;implicit;refresh_token

7
config/crd/bases/hydra.ory.sh_oauth2clients.yaml
View File

@ -114,6 +114,13 @@ spec:
pattern: (^$|^https?://.*) pattern: (^$|^https?://.*)
type: string type: string
type: object type: object
jwksUri:
description:
Define the URL where the JSON Web Key Set should be fetched
from when performing the private_key_jwt client
authentication method.
pattern: (^$|^https?://.*)
type: string
metadata: metadata:
description: Metadata is abritrary data description: Metadata is abritrary data
nullable: true nullable: true

1
hydra/types.go
View File

@ -28,6 +28,7 @@ type OAuth2ClientJSON struct {
Owner string `json:"owner"` Owner string `json:"owner"`
TokenEndpointAuthMethod string `json:"token_endpoint_auth_method,omitempty"` TokenEndpointAuthMethod string `json:"token_endpoint_auth_method,omitempty"`
Metadata json.RawMessage `json:"metadata,omitempty"` Metadata json.RawMessage `json:"metadata,omitempty"`
JwksUri string `json:"jwks_uri,omitempty"`
} }
// Oauth2ClientCredentials represents client ID and password fetched from a // Oauth2ClientCredentials represents client ID and password fetched from a