Description
Some Identity Providers do not expose all JWK keys used to sign access tokens through the main JWKS endpoint exposed through OIDC Discovery. For instance Ping Federate can have multiple Token Providers, each exposing its signing keys through separate JWKS endpoints.
To support these, the JWT plugin should optinally accept an array of URLs for the jwkUrl configuration option. If an array is provided, then we'll fetch all the JWKS and validate the JWT against all before we fail the request.
Attachments
Issue Links
- is required by
-
SOLR-13734 JWTAuthPlugin to support multiple issuers
-
- Resolved
-
- links to
