-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[#23034] YSQL: Add Support for OIDC IDP URL (jwt_jwks_url) to fetch a…
…nd refresh JKWS Summary: Added support for jwt_jwks_url in JWT Authentication to fetch and refresh JWKS from url. **Configuration** In ysql_hba_conf_csv with method jwt can provide jwt_jwks_url to pass the url. Atleast one of the jwt_jwks_path or jwt_jwks_url must be provided, if both are provided then jwt_jwks_url will be used. **Fetching** Implementation is as follows: 1. Fetches the keys from url using libcurl (EasyCurl implentation) 2. The keys are used for authentication in a similar fashion as with jwt_jwks_path JIRA: DB-11962 Test Plan: **Automated** ./yb_build.sh --java-test 'org.yb.pgsql.TestJWTAuth' Added similar tests as jwt_jwks_path, to check for valid url, json, and authentication. Also added checks for invalid url and invalid json. Reviewers: stiwary, skumar Reviewed By: stiwary Subscribers: yql Differential Revision: https://phorge.dev.yugabyte.com/D36468
- Loading branch information
1 parent
6ec058d
commit 18bb9b8
Showing
7 changed files
with
239 additions
and
13 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters