minio/internal/config/identity/openid
Harshavardhana af78c3925a
add userinfo support for OpenID (#12469)
Some identity providers like GitLab do not provide
information about group membership as part of the
identity token claims. They only expose it via OIDC compatible
'/oauth/userinfo' endpoint, as described in the OpenID
Connect 1.0 sepcification.

But this of course requires application to make sure to add
additional accessToken, since idToken cannot be re-used to
perform the same 'userinfo' call. This is why this is specialized
requirement. Gitlab seems to be the only OpenID vendor that requires
this support for the time being.

fixes #12367
2021-09-13 16:22:14 -07:00
..
provider rename all access token to id_tokens 2021-07-27 22:38:12 -07:00
ecdsa-sha3_contrib.go fix: enable go1.17 github ci/cd (#12997) 2021-08-18 18:35:22 -07:00
help.go add userinfo support for OpenID (#12469) 2021-09-13 16:22:14 -07:00
jwks.go rename all remaining packages to internal/ (#12418) 2021-06-01 14:59:40 -07:00
jwks_test.go rename all remaining packages to internal/ (#12418) 2021-06-01 14:59:40 -07:00
jwt.go add userinfo support for OpenID (#12469) 2021-09-13 16:22:14 -07:00
jwt_test.go add userinfo support for OpenID (#12469) 2021-09-13 16:22:14 -07:00
legacy.go rename all remaining packages to internal/ (#12418) 2021-06-01 14:59:40 -07:00
rsa-sha3_contrib.go fix: enable go1.17 github ci/cd (#12997) 2021-08-18 18:35:22 -07:00
validators.go add userinfo support for OpenID (#12469) 2021-09-13 16:22:14 -07:00
validators_test.go add userinfo support for OpenID (#12469) 2021-09-13 16:22:14 -07:00