README.md

Rego Policies For OIDC Client Output Validation

conftest Rego policies for validating OIDC responses.

Pre-requisites

• Install conftest
• (optional) Install oidc-client

tl:dr

• Generate json output files with oidc-client

## create output dir
mkdir -p output/
## generate  json output files
oidc-client client --config my-config.yaml  --output --output-dir output/

• validate outputs against standard policies

make all

Standard Policies

Standard policies, based on various OAuth2 or OIDC RFC, are defined in standard-policies/.