Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expose /.well-known/jwks-okta for Okta API services type App #50040

Merged
merged 1 commit into from
Dec 12, 2024

Conversation

kopiczko
Copy link
Contributor

@kopiczko kopiczko commented Dec 10, 2024

Issue https://github.com/gravitational/teleport.e/issues/5517

When configured to use OAuth credentials Okta client uses JWT tokens signed with Okta CA. We need to expose JWKS URL to be able to easily configure public key for signature verification.

394480302-fe94ec7c-f56d-4868-a4d6-4930ba2f650f

changelog: Expose /.well-known/jwks-okta public endpoint for Okta API services type App.

"github.com/gravitational/teleport/lib/jwt"
"github.com/gravitational/trace"
)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

jwks(...) was moved from lib/web/oidcidp.go

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No changes, correct?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No changes.

@kopiczko kopiczko force-pushed the kopiczko/add-jwks-okta-endpoint branch 2 times, most recently from 52611c0 to ddb3434 Compare December 10, 2024 23:03
@kopiczko kopiczko marked this pull request as ready for review December 10, 2024 23:19
@kopiczko kopiczko requested a review from smallinsky December 10, 2024 23:19
"github.com/gravitational/teleport/lib/jwt"
"github.com/gravitational/trace"
)

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No changes, correct?

lib/web/apiserver.go Show resolved Hide resolved
Copy link
Contributor

@smallinsky smallinsky left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lib/web/okta_test.go Outdated Show resolved Hide resolved
lib/web/okta_test.go Outdated Show resolved Hide resolved
lib/web/okta_test.go Outdated Show resolved Hide resolved
@kopiczko kopiczko force-pushed the kopiczko/add-jwks-okta-endpoint branch 2 times, most recently from a496200 to 0748be2 Compare December 12, 2024 14:35
@public-teleport-github-review-bot

@kopiczko - this PR will require admin approval to merge due to its size. Consider breaking it up into a series smaller changes.

@kopiczko
Copy link
Contributor Author

WTH, something went very wrong with my squash

@kopiczko kopiczko force-pushed the kopiczko/add-jwks-okta-endpoint branch 2 times, most recently from a496200 to 3a65dad Compare December 12, 2024 14:40
@kopiczko kopiczko enabled auto-merge December 12, 2024 14:41
@kopiczko kopiczko force-pushed the kopiczko/add-jwks-okta-endpoint branch from 3a65dad to ba94e66 Compare December 12, 2024 14:43
Copy link

🤖 Vercel preview here: https://docs-el80x8180-goteleport.vercel.app/docs

@kopiczko kopiczko force-pushed the kopiczko/add-jwks-okta-endpoint branch from ba94e66 to 27b69fb Compare December 12, 2024 14:52
@kopiczko kopiczko added this pull request to the merge queue Dec 12, 2024
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Dec 12, 2024
@kopiczko kopiczko added this pull request to the merge queue Dec 12, 2024
Merged via the queue into master with commit 804b4cd Dec 12, 2024
40 checks passed
@kopiczko kopiczko deleted the kopiczko/add-jwks-okta-endpoint branch December 12, 2024 16:03
@public-teleport-github-review-bot

@kopiczko See the table below for backport results.

Branch Result
branch/v17 Create PR

@kopiczko
Copy link
Contributor Author

Thanks @codingllama for trough review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants