conftest Rego policies for validating OIDC responses.
- Install conftest
- (optional) Install oidc-client
- Generate json output files with oidc-client
## create output dir
mkdir -p output/
## generate json output files
oidc-client client --config my-config.yaml --output --output-dir output/
- validate outputs against standard policies
make all
Standard policies, based on various OAuth2 or OIDC RFC, are defined in standard-policies/
.