[GitHub] [apisix] Boburmirzo commented on issue #10245: bug: AUTH0 oidc integration for bearer_only=true requires introspection endpoint

["Boburmirzo (via GitHub)" <gi...@apache.org>]

Boburmirzo commented on issue #10245:
URL: https://github.com/apache/apisix/issues/10245#issuecomment-1731177748

   @Radu-Iuonac Thank you for explaining the steps to reproduce well!
   
   This doc has been tested and updated recently, there might be a few issues. Please, add "use_jwks": true value to your route plugin.
   
   Could you try with this configuration?
   
   curl -i "http://127.0.0.1:9180/apisix/admin/routes" -X PUT -d '
   {
     "id": "auth-with-oidc",
     "uri":"/anything/*",
     "plugins": {
       "openid-connect": {
         "client_id": "'"$AUTH0_CLIENT_ID"'",
         "client_secret": "'"$AUTH0_CLIENT_SECRET"'",
         "discovery": "https://'"$AUTH0_DOMAIN"'/.well-known/openid-configuration",
         "scope": "openid profile",
         "redirect_uri": "http://localhost:9080/anything/callback",
         "bearer_only": true,
         "use_jwks": true
       }
     },
     "upstream":{
       "type":"roundrobin",
       "nodes":{
         "httpbin.org:80":1
       }
     }
   }'
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org