Add Support For JWT-Secured Authorization Requests in OIDC Connector by rhammonds-teleport · Pull Request #56990 · gravitational/teleport

POC make signer usable with jwt signing.

Joerger

authored and

rhammonds-teleport

committed

Add SignOAuthRequest method.

Joerger

authored and

rhammonds-teleport

committed

Update TODO; Add e ref.

Joerger

authored and

rhammonds-teleport

committed

* Add new configuration parameter 'enable_request_objects' to oidc connector to enable the use of JWT-Secured Authorization Requests

rhammonds-teleport

committed

* Add setter for enabling/disabling JARs on an oidc connector

rhammonds-teleport

committed

Add comment on OIDCConnectorV3 setter

rhammonds-teleport

committed

* Rename 'SignOauthRequest' method to more generic 'SignAny'

rhammonds-teleport

committed

Remove generic JWT signing/verification methods and replace with opinionated OIDC SignOIDCAuthRequestToken and VerifyOIDCAuthRequestToken alternatives

rhammonds-teleport

committed

Replace 'EnableRequestObjects' setting on OIDCConnectorSpecV3 with a string 'RequestObjectMode' which gives us more flexibility to support additional request object settings in the future.

rhammonds-teleport

committed

Clean up tests, fix formatting, and pick (hopefully) better names for OIDC Auth Request related JWT methods.

rhammonds-teleport

committed

Periods at end of godoc comments

rhammonds-teleport

committed

Regenerate configuration docs/examples

rhammonds-teleport

committed

* Embed jwt.Claims within 'OIDCAuthRequestClaims', require that at least 'audience' and 'issuer' claims are set, and perform validation of claims during parsing/verification.

rhammonds-teleport

committed

Remove OIDC Auth Request utilities from 'lib/jwt' package.

rhammonds-teleport

committed

Regenerate terraform docs

rhammonds-teleport

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add Support For JWT-Secured Authorization Requests in OIDC Connector#56990

Add Support For JWT-Secured Authorization Requests in OIDC Connector#56990
rhammonds-teleport merged 15 commits into
masterfrom
rhammonds/signed-oauth

Commits on Aug 8, 2025

POC make signer usable with jwt signing.

Add SignOAuthRequest method.

Update TODO; Add e ref.

* Add new configuration parameter 'enable_request_objects' to oidc connector to enable the use of JWT-Secured Authorization Requests

* Add setter for enabling/disabling JARs on an oidc connector

Add comment on OIDCConnectorV3 setter

* Rename 'SignOauthRequest' method to more generic 'SignAny'

Remove generic JWT signing/verification methods and replace with opinionated OIDC SignOIDCAuthRequestToken and VerifyOIDCAuthRequestToken alternatives

Replace 'EnableRequestObjects' setting on OIDCConnectorSpecV3 with a string 'RequestObjectMode' which gives us more flexibility to support additional request object settings in the future.

Clean up tests, fix formatting, and pick (hopefully) better names for OIDC Auth Request related JWT methods.

Periods at end of godoc comments

Regenerate configuration docs/examples

* Embed jwt.Claims within 'OIDCAuthRequestClaims', require that at least 'audience' and 'issuer' claims are set, and perform validation of claims during parsing/verification.

Remove OIDC Auth Request utilities from 'lib/jwt' package.

Regenerate terraform docs