Uploaded image for project: 'Hybrid Cloud Console'
  1. Hybrid Cloud Console
  2. RHCLOUD-44000

[BOP] Create new /jwk Endpoint

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • False
    • None
    • Unset
    • None

      1. Create new /jwk endpoint in bop
      2. This endpoint will require a kid as input
      3. mbop example: https://github.com/RedHatInsights/mbop/blob/16835a13ace135bcc556f8a7cf66ccdf6032c9aa/internal/handlers/jwt_v1_handler.go#L23 
      1. It will reach out to sso /certs endpoint: https://sso.stage.redhat.com/auth/realms/redhat-external/protocol/openid-connect/certs , this returns a list and we match on the kid
      2. Grab the x5c data from the matched object and convert to pem data
      3. https://www.npmjs.com/package/jwk-to-pem  (or similar)

      Return this pem data (base64 encoded, similar to https://sso.stage.redhat.com/auth/realms/redhat-external/ public_key)

      Extra notes: https://docs.google.com/document/d/1_gDfjkwvuLAEMS0l1MKd-MMbr6BbeqVPxRYVOeOHSHM/edit?tab=t.lh7tyl8wi25t

              rh-ee-zhzeng Jay Zeng
              abaiken Ashley Morgan
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: