mod_oauth2 : Directive for additional post params, similar to OIDCOAuthIntrospectionEndpointParams

[ravikaycee]

Could you please share the similar directive for mod_oauth2

OIDCOAuthIntrospectionEndpointParams

It will be useful as there is a need to pass few more mandatory params to introspection url apart from client_id and client_secret.

[zandbelt]

that was still a TODO in liboauth2; I just added support for it in OpenIDC/liboauth2@090e212 ; would you be able to use a self-compiled version of liboauth2 from there?

[ravikaycee]

Results seems to be valid. I tried installing the file manually using sudo as well. Still it is referring the old version in the logs.

[zandbelt]

I just double-checked mine:

root@83ad1f97d2bb:/# dpkg -l | grep oauth2 | grep -v nginx
ii  libapache2-mod-oauth2          3.3.1-1.bullseye               amd64        OAuth 2.0 Resource Server module for Apache
ii  liboauth2                      1.5.0-1.bullseye               amd64        C library for OAuth 2.0 servers and clients
ii  liboauth2-apache               1.5.0-1.bullseye               amd64        Apache bindings for liboauth2
root@83ad1f97d2bb:/# cat /var/log/apache2/error.log | grep mod_oauth2 | tail -n 1
[Sat Mar 11 16:05:33.339424 2023] [:info] [pid 18:tid 139894854040896] mod_oauth2-3.3.1-liboauth2-1.5.0 - init

so it must be a local issue

[ravikaycee]

I have done apache setup with different image again, right from the scratch and ended up with the same lib version issue. Is it possible to share an updated mod_oauth2 with expected liboauth2 & liboauth2-apache dependency version as >= 1.5.0

[zandbelt]

that's not going to help; I just re-tried myself from scratch with the packages provided from the Github liboauth2 releases page and everything works as expected

[ravikaycee]

I understand. Let's check it out whether it helps or not. It will be really helpful if you could share the package with updated dependencies..