[All SDKs] OAuth token endpoint should be configurable and/or support oidc discovery
le-yams opened this issue · 3 comments
le-yams commented
Description
For clients using OAuth2 credentials, the token endpoint is currently hardcoded in all SDKs (with /oauth/token
value).
Could it be possible to make it configurable? Or even better support oidc discovery?
I'm willing to contribute if that's something you would be interested in :)
Steps to take
Change the apiTokenIssuer
field in the configuration to accept a full URL.
So:
ApiTokenIssuer |
Endpoint SDK will hit |
---|---|
issuer.fga.example |
https://issuer.fga.example/oauth/token |
https://issuer.fga.example |
https://issuer.fga.example/oauth/token |
https://issuer.fga.example:8080 |
https://issuer.fga.example:8080/oauth/token |
issuer.fga.example/some_endpoint |
https://issuer.fga.example/some_endpoint |
https://issuer.fga.example/some_endpoint |
https://issuer.fga.example/some_endpoint |
https://issuer.fga.example:8080/some_endpoint |
https://issuer.fga.example:8080/some_endpoint |
Of course, we'll need to do some of the validations to ensure e.g. users are passing fields with https
or http
(and not e.g. ftp) and that the full url is valid
Related Issues
- .NET SDK issue: openfga/dotnet-sdk#30
- (duplicate) #197