[ 
https://issues.apache.org/jira/browse/KNOX-3470?focusedWorklogId=1042809&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1042809
 ]

ASF GitHub Bot logged work on KNOX-3470:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 18/Sep/26 20:21
            Start Date: 18/Sep/26 20:21
    Worklog Time Spent: 10m 
      Work Description: moresandeep opened a new pull request, #1417:
URL: https://github.com/apache/knox/pull/1417

   [KNOX-3470](https://issues.apache.org/jira/browse/KNOX-3470) - Add support 
for  /.well-known/oauth-authorization-server
   
   ## What changes were proposed in this pull request?
   Add support for  /.well-known/oauth-authorization-server, this support is 
added at the topology level e.g.
   
`https://localhost:8443/gateway/knoxidf-test/.well-known/oauth-authorization-server`
 to be as compliant with the RFC 8414 as we possibally can be. The RFC 8414 
dictates `.well-known/oauth-authorization-server` to be exposed at the root 
domain but the way Knox servlets are setup that is not possible. 
   
   `.well-known/oauth-authorization-server`  is also exposed at the knox IDF 
api level e.g. 
`https://localhost:8443/gateway/knoxidf-test/knoxidf/api/v1/.well-known/oauth-authorization-server`
 to be in line with `/knoxidf/api/v1/.well-known/openid-configuration`.
   
   ## How was this patch tested?
   
   ### Manual Testing
   Following `knoxidf-test` topology was used for testing
   
   ```
   <?xml version="1.0" encoding="utf-8"?>
   <topology>
       <gateway>
           <provider>
               <role>authentication</role>
               <name>ShiroProvider</name>
               <enabled>true</enabled>
               <param>
                   <name>main.ldapRealm</name>
                   
<value>org.apache.knox.gateway.shirorealm.KnoxLdapRealm</value>
               </param>
               <param>
                   <name>main.ldapRealm.userDnTemplate</name>
                   <value>uid={0},ou=people,dc=hadoop,dc=apache,dc=org</value>
               </param>
               <param>
                   <name>main.ldapRealm.contextFactory.url</name>
                   <value>ldap://localhost:33389</value>
               </param>
               <param>
                   
<name>main.ldapRealm.contextFactory.authenticationMechanism</name>
                   <value>simple</value>
               </param>
   
               <!

Issue Time Tracking
-------------------

            Worklog Id:     (was: 1042809)
    Remaining Estimate: 0h
            Time Spent: 10m

> Add support for  /.well-known/oauth-authorization-server
> --------------------------------------------------------
>
>                 Key: KNOX-3470
>                 URL: https://issues.apache.org/jira/browse/KNOX-3470
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>            Reporter: Sandeep More
>            Assignee: Sandeep More
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Knox needs to be able to support /.well-known/oauth-authorization-server 
> (part of RFC 8414)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to