Restrict the URL used to do delegated authorization

Added oidc:jwtRequestUri as part of https://www.pivotaltracker.com/story/show/186313207
OpenConext · Oct 23, 2023 · d57b5b2 · d57b5b2
1 parent 57d4c14
commit d57b5b2
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/roles/manage-server/templates/metadata_configuration/oidc10_rp.schema.json.j2 b/roles/manage-server/templates/metadata_configuration/oidc10_rp.schema.json.j2
@@ -289,6 +289,11 @@
           "info": "Select this option to force all claims to be included in the id_token.",
           "default": false
         },
+        "oidc:jwtRequestUri": {
+          "type": "string",
+          "format": "url",
+          "info": "Enter the URL that is allowed to use for this RP to host a JWT containing request parameters (when doing a request using a signed jwt)."
+        },
         "logo:0:url": {
           "type": "string",
           "format": "url",