TheNetworg/oauth2-azure

Proposal: add "appid" query parameter

infabo opened this issue · 1 comments

If the application has custom signing keys you can add a appid parameter to the openid-configuration-URL, so you receive the correct jwks_uri with the additional keys.

see https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc

image

$openIdConfigurationUri = $this->urlLogin . $tenant . $versionInfix . '/.well-known/openid-configuration';

It may be safe to add the appid-queryparam in all cases.

This is pretty neat, didn't know about this feature!