Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Zone Sync for N+ OIDC Core and 7 IdPs #6

Open
shawnhankim opened this issue Oct 4, 2022 · 0 comments
Open

Zone Sync for N+ OIDC Core and 7 IdPs #6

shawnhankim opened this issue Oct 4, 2022 · 0 comments

Comments

@shawnhankim
Copy link
Member

shawnhankim commented Oct 4, 2022

Background

  • NGINX ACM is going to provide Zone Sync Policy.
  • NGINX INC OSS has a PR to resolve ZoneSync delays.
  • Hence, we need to enhance these both features into this NGINX OIDC Core and test it to make sure that the features work for each IdP.

AC

  • Refactor NGINX Plus OIDC Core by referencing this PR to resolve ZoneSync delays.
  • Support containers' environment for simulating ZoneSync delay.
  • Sync with the Zone Sync Policy of NGINX ACM.
  • Test with multi clusters and 7 IdPs.

Misc.

  • Additional custom option: $enable_zone_sync
  • Key Value Zones:
keyval_zone zone=oidc_id_tokens:1M state=/etc/nginx/aux/oidc_id_tokens.json timeout=1h sync;
keyval_zone zone=oidc_access_tokens:1M state=/etc/nginx/aux/oidc_access_tokens.json timeout=1h sync;
keyval_zone zone=oidc_refresh_tokens:1M state=/etc/nginx/aux/oidc_refresh_tokens.json timeout=8h sync;
keyval_zone zone=oidc_pkce:128K timeout=90s sync;
keyval_zone zone=oidc_nonce_hash:128K timeout=90s sync;
keyval_zone zone=oidc_token_query_params:128K timeout=90s sync;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant