-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update OIDC bearer doc with a section about response filters #45143
Update OIDC bearer doc with a section about response filters #45143
Conversation
import io.quarkus.oidc.runtime.OidcUtils; | ||
|
||
@ApplicationScoped | ||
@Unremovable |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is @Unremovable
always required? Wonder if beans with @OidcEndpoint
can be considered @Unremovable
by default
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@gastaldi Thanks, interesting idea, we can probably make an enhancement request to introspect it at build time. Though @OidcEndpont
is optional, without it a filter applies to all endpoint responses (in case of response filters)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Right, or maybe consider OidcResponseFilter
implementations unremovable?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, for all 3 types of filters (request, response, redirect)
docs/src/main/asciidoc/security-oidc-bearer-token-authentication.adoc
Outdated
Show resolved
Hide resolved
4a00109
to
a781b4f
Compare
docs/src/main/asciidoc/security-oidc-code-flow-authentication.adoc
Outdated
Show resolved
Hide resolved
if (contentType.equals("application/json") { | ||
String tenantId = rc.requestProperties().get(OidcUtils.TENANT_ID_ATTRIBUTE); <3> | ||
String metadata = rc.responseBody().toString(); <4> | ||
LOG.debugf("Tenant %s OIDC metadata: %s", tenantId, metadata); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
For a cleaner code, how about using io.quarkus.logging.Log
instead?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@gastaldi Sure, updated both docs, thanks
🙈 The PR is closed and the preview is expired. |
This comment has been minimized.
This comment has been minimized.
a781b4f
to
160392c
Compare
160392c
to
e72472f
Compare
Status for workflow
|
This PR adds a missing section about OIDC response filters to the OIDC bearer guide