Tech Journey

Why OIDC Discovery is important? I dentity Server offers a JSON document under the /.well-known/openid-configuration URL. This document has information about the issuer name, endpoint URLs, key material and capabilities of the provider, e.g. which scopes or response types it supports.  High Level Steps   Start Identity Server. Use curl commands to discover the end user's OpenID Provider and the other information. Detailed Instructions   Start Identity server, open the terminal and run below curl command to obtain ‘href’ value which is the OpenidConnect discover endpoint of the Identity Servers. curl -v -k --user admin:admin https://localhost:9443/.well-known/webfinger?resource='acct:admin@localhost&rel=http://openid.net/specs/connect/1.0/issuer ' (Here resource is identifier for the target end user that is the subject of the discovery request and rel is URI identifying the type of service whose location is being requested.)   ...

OIDC dynamic client registration facilitates on the fly registrations for a client instead of manually registration. High Level Steps to follow   Start Identity Server Register applications using post request Detailed Instructions Register applications using post requests. open the on-line ' https://curlbuilder.com/ ' and fill the required text fields as bellow to generate the required curl command. Select the request as POST and URL as ‘https://localhost:9443/identity/connect/register’ to invoke the register endpoint. Add following as the request body.    {               "redirect_uris": ["wso2.example.com"],      "client_name": "test",      "ext_param_owner": "admin",       "grant_types": ["password"] } Definitions of the above parameters are as below : redirect_uris : An ar...

From this blog post we will see how Wso2 IS supports for prompt parameter to be used in OpenIDConnect authentication request by using the playground sample. The Prompt parameter According to the OpenIDConnect specification, by using prompt parameter we can force the authorization server to do specific tasks. Wso2 Identity Server 5.1.0 (which will be released in few weeks) supports three values to be used with prompt parameter. prompt=none   If an end user is not already authenticated  or if there is not pre-configured consent(though there is an already authenticated user) the Identity Server will return an error page and if there is an already authenticated user and pre-configured consent the Identity Server will provide the authorization code. We can send the authentication request with prompt parameter to Identity server by using playground sample as follows. If there is not already authenticated end user you will get an error from Identity Server as below. ...