diff --git a/connector/oidc/oidc.go b/connector/oidc/oidc.go index fd715970b1..578480ece3 100644 --- a/connector/oidc/oidc.go +++ b/connector/oidc/oidc.go @@ -107,10 +107,13 @@ type ProviderDiscoveryOverrides struct { // AuthURL provides a way to user overwrite the Auth URL // from the .well-known/openid-configuration authorization_endpoint AuthURL string `json:"authURL"` + // JWKSURL provides a way to user overwrite the JWKS URL + // from the .well-known/openid-configuration jwks_uri + JWKSURL string `json:"jwksURL"` } func (o *ProviderDiscoveryOverrides) Empty() bool { - return o.TokenURL == "" && o.AuthURL == "" + return o.TokenURL == "" && o.AuthURL == "" && o.JWKSURL == "" } func getProvider(ctx context.Context, issuer string, overrides ProviderDiscoveryOverrides) (*oidc.Provider, error) { @@ -151,7 +154,9 @@ func getProvider(ctx context.Context, issuer string, overrides ProviderDiscovery if overrides.AuthURL != "" { config.AuthURL = overrides.AuthURL } - + if overrides.JWKSURL != "" { + config.JWKSURL = overrides.JWKSURL + } return config.NewProvider(context.Background()), nil }