Skip to content

History / Multiple Providers

Edit page New page

Revisions

  • doc: document features that shipped without wiki coverage - OAuth 2.0 Resource Server: document OIDCOAuthVerifyAudience and OIDCOAuthVerifyIssuer (2.4.20). The local validation section documented the key material and stopped there, so it described a configuration that accepts any token signed by the configured key - including one the AS issued for a different resource server. Covers the "Require claim aud:<value>" equivalent for older releases, the newly required "exp" claim, and links the advisory GHSA-wcvh-g65p-v576 - Multiple Providers: add the 9 .conf keys the parser accepts but the page never listed: profile, validate_issuer, id_token_aud_values, logout_request_params, token_endpoint_tls_client_cert/_key/_key_pwd, dpop_mode, cert_bound_tokens. The list now matches metadata/conf.c exactly - new page "Security Profiles and Token Binding" covering OIDCProfile (OIDC10/FAPI20), Pushed Authorization Requests, DPoP including the proof API and its local-address restriction, and RFC 8705 mutual TLS client authentication plus certificate-bound access tokens - none of which had a home in the wiki

    @zandbelt zandbelt committed Aug 3, 2026
    b50c58a

  • rename zmartzone to OpenIDC

    @zandbelt zandbelt committed Feb 5, 2025
    62b2895

  • update pingidentity to OpenIDC

    @zandbelt zandbelt committed Feb 5, 2025
    c18cc64

  • push response_require_iss change

    @zandbelt zandbelt committed Feb 5, 2025
    acd0634

  • Updated Multiple Providers (markdown)

    @zandbelt zandbelt committed Oct 28, 2021
    23a872b

  • add per-provider keys doc

    @zandbelt zandbelt committed Aug 22, 2019
    8642bf6

  • document issuer_specific_redirect_uri

    @zandbelt zandbelt committed Aug 29, 2017
    e4320d5

  • Updated Multiple Providers (markdown)

    @zandbelt zandbelt committed Aug 9, 2017
    a75cc88

  • Created Multiple Providers (markdown)

    @zandbelt zandbelt committed Aug 9, 2017
    1919ee4