Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deprecate auth_oauth2.jwks_url and its corresponding erlang config entry #12239

Closed
MarcialRosales opened this issue Sep 6, 2024 · 1 comment

Comments

@MarcialRosales
Copy link
Contributor

MarcialRosales commented Sep 6, 2024

Is your feature request related to a problem? Please describe.

auth_oauth2.jwks_url is the configuration variable that configures the JSON Web Key Sets endpoint.

When RabbitMQ introduced support for multiple oauth providers, auth_oauth2.oauth_providers.$name.jwks_uri was used instead. jwks_uri is the actual endpoint name used by OpenId Discovery Endpoint and RabbitMQ uses that endpoint to download all the other endpoints including the jwks_uri.
A user may choose to configure the issuer url on a given oauth provider, e.g. auth_oauth2.oauth_providers.okta.issuer or instead configure the individual endpoints' urls, .e.g auth_oauth2.oauth_providers.okta.jwks_uri = https://someurl.

Describe the solution you'd like

It can be very confusing having jwks_uri and jwks_url in the OAuth2 configuration.

For this reason, RabbitMQ is deprecating auth_oauth2.jwks_url in favour of auth_oauth2.jwks_uri.

Describe alternatives you've considered

No response

Additional context

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant