New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

N+ OIDC Session Management: auth_request handles 200/401 with NJS (for ACM: Private/Public/Partner API) #4

Open

shawnhankim opened this issue Oct 4, 2022 · 0 comments

Member

shawnhankim commented Oct 4, 2022

Background:

NGINX auth_request directive could handle 200 response from NJS module in the past. (I haven't checked the N+ version.) However, It returns only 401 although NJS returns 200.
To successfully manage OIDC session for the Private/Public/Partner API of NGINX ACM & Developer Portal, this needs to be either fixed or implemented by other ways.

AC:

Investigate the root cause why NGINX auth_request directive return 401 from the 200 response of NJS.
Try session management without using auth_request.
OIDC Ref. Implementation: Either fix N+ auth_request with NJS or enhance new way of session management.
Implement the logic in the ACM & Developer Portal if necessary.

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment