From 5cb6e631870093d645ad97a4947772e517136190 Mon Sep 17 00:00:00 2001 From: Austin Gebauer <34121980+austingebauer@users.noreply.github.com> Date: Thu, 5 Aug 2021 15:13:33 -0700 Subject: [PATCH] auth/oidc: documents redirect URI for UI login with form_post response_mode (#12273) --- website/content/docs/auth/jwt/index.mdx | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/website/content/docs/auth/jwt/index.mdx b/website/content/docs/auth/jwt/index.mdx index c551bb9968e0c..62bdda4c58e75 100644 --- a/website/content/docs/auth/jwt/index.mdx +++ b/website/content/docs/auth/jwt/index.mdx @@ -140,11 +140,17 @@ of the configured redirected URIs. These same "localhost" URIs must be added to **Vault UI** Logging in via the Vault UI requires a redirect URI of the form: + `https://{host:port}/ui/vault/auth/{path}/oidc/callback` The "host:port" must be correct for the Vault server, and "path" must match the path the JWT backend is mounted at (e.g. "oidc" or "jwt"). +If the [oidc_response_mode](/api-docs/auth/jwt#oidc_response_mode) is set to `form_post`, then +logging in via the Vault UI requires a redirect URI of the form: + +`https://{host:port}/v1/auth/{path}/oidc/callback` + Prior to Vault 1.6, if [namespaces](/docs/enterprise/namespaces) are in use, they must be added as query parameters, for example: