I am trying to make openid/oauth integration with openshift. I need from only authN (validating user identity) - in the end i just need username, and confirmation from some trusted authN provider, nothing else.
With google or anyone else - when i am requesting openid config to fetch claims and username - ive got good data from endpoints of form https://accounts.google.com/.well-known/openid-configuration
but openshift and documentation says me that i need to navigate to a slightly different route (which is not "well known" to me, from my perspective) - /.well-known/oauth-authorization-server. and navigating to /openid-configuration - returns very little info (looks like its disabled or not fully setup)
How to enable openid scope on openshift oauth server?
currently its responding me with incomplete data (from my perspective):
{
"issuer": "https://kubernetes.default.svc",
"jwks_uri": "https://****/openid/v1/jwks",
"response_types_supported": [
"id_token"
],
"subject_types_supported": [
"public"
],
"id_token_signing_alg_values_supported": [
"RS256"
]
}
PS
This one may be related, as an illustration - why for everyone we may use openid+claims, and for openshift I need totally different code path, to use "user:full" scope?
PS2
here it is stated OpenID Connect requests MUST contain the openid scope value. If the openid scope value is not present, the behavior is entirely unspecified. How to make openshift behave as a standart openid connect provider server? (avoiding working with their userinfo, which is totally in custom format)