You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Up to v1.0.4, janssenproject/persistence-loader entrypoint adds/removes attributes and/or its values to conform to janssenproject/auth-server configuration.
For illustration, the following code ensures missing private_key_jwt is added to tokenEndpointAuthMethodsSupported attribute.
However, sometime this behavior is unexpected, for example when users only want to use tls_client_auth for tokenEndpointAuthMethodsSupported attribute, the entrypoint will add missing value to the attribute.
Ref: ticket 10942
Possible solutions:
The janssenproject/persistence-loader entrypoint should only adds/removes top-level attributes, not its values.
Add flag/env var to skip updating jans-auth configuration automatically (manual updates can use Config API or jans-cli)
The text was updated successfully, but these errors were encountered:
iromli
changed the title
feat(image): only allow updates on top-level attributes in jans-auth config
feat(image): preserve attribute's values in jans-auth config
Nov 16, 2022
After several tests on possible solution no. 1, there are a couple of issues found so far:
specifying the old format "authorizationRequestCustomAllowedParameters": ["customParam1", "customParam2", "customParam3"] will break the app as the data type is no longer valid/conform to jans-auth
since v1.0.3, jans-cli requires urn:ietf:params:oauth:grant-type:device_code grant type (specified in grantTypesSupported and/or dynamicGrantTypeDefault attribute) to work properly
Up to v1.0.4,
janssenproject/persistence-loader
entrypoint adds/removes attributes and/or its values to conform tojanssenproject/auth-server
configuration.For illustration, the following code ensures missing
private_key_jwt
is added totokenEndpointAuthMethodsSupported
attribute.However, sometime this behavior is unexpected, for example when users only want to use
tls_client_auth
fortokenEndpointAuthMethodsSupported
attribute, the entrypoint will add missing value to the attribute.Ref: ticket 10942
Possible solutions:
janssenproject/persistence-loader
entrypoint should only adds/removes top-level attributes, not its values.Config API
orjans-cli
)The text was updated successfully, but these errors were encountered: