Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make sending OIDC client id with introspection credentials optional #27449

Merged

Conversation

sberyozkin
Copy link
Member

Fixes #27442

This PR adds a boolean configuration property making it possible to skip sending the OIDC client id when using the custom/basic introspection authentication. I haven't added a test as testing this case is quite involved (see #26917) so I'm not sure these PR changes need another test like the one added in #26917, but I can work on it if preferred

@quarkus-bot

This comment has been minimized.

@sberyozkin
Copy link
Member Author

Hmm, I'm puzzled how such a PR can cause so many failures, going to check, sorry

@sberyozkin sberyozkin force-pushed the oidc_introspection_auth_optional_client_id branch from a83345c to d6ea482 Compare August 23, 2022 18:04
@sberyozkin
Copy link
Member Author

The test created IntrospectionCredentials dynamically, so the default true value was not injected and the test failed which actually confirmed this PR is effective :-), so I made sure this property is correctly initialized even if no injection is involved.

@gsmet gsmet merged commit 709f09d into quarkusio:main Aug 23, 2022
@quarkus-bot quarkus-bot bot added this to the 2.13 - main milestone Aug 23, 2022
@sberyozkin sberyozkin deleted the oidc_introspection_auth_optional_client_id branch August 23, 2022 20:30
@gsmet gsmet modified the milestones: 2.13 - main, 2.12.0.Final Aug 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[quarkus-oidc] Wrong client id sent to introspection endpoint when introspection credentials are given
3 participants