WEBDIENSTE/lasuite-docs
1
0
Fork 0
mirror of https://github.com/suitenumerique/docs.git synced 2026-09-30 13:35:10 +02:00
Code Issues Packages Projects Releases Wiki Activity

✨(backend) publish the JWT public key on a JWKS endpoint

Browse Source 
The yhub service will need our public key in order to validate the jwt
token we will used. We choose to expose a jwks endpoint as it is a
standard wat to do this.
This commit is contained in:
Manuel Raynaud
2026-08-13 12:08:20 +02:00
parent 7ea52473dc
commit cb58076edd
10 changed files with 317 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
documentation/resource_server.md
+5
View File
@@ -20,6 +20,11 @@ OIDC_RS_ALLOWED_AUDIENCES=
It implements the resource server using `django-lasuite`, see the [documentation](https://github.com/suitenumerique/django-lasuite/blob/main/documentation/how-to-use-oidc-resource-server-backend.md)
When `OIDC_RS_PRIVATE_KEY_STR` is set, the resource server publishes its public
key on `/external_api/{version}/jwks`. This is the URI to declare to your OIDC
provider. Do not confuse it with `/api/{version}/jwks`, which publishes the key
validating the tokens Docs itself issues to call external services.
## Customise allowed routes
Configure the `EXTERNAL_API` setting to control which routes and actions are available in the external API. Set it via the `EXTERNAL_API` environment variable (as JSON) or in Django settings.