-
Notifications
You must be signed in to change notification settings - Fork 25k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add doc reference for client_auth_method #70124
Add doc reference for client_auth_method #70124
Conversation
Support for additional Client authentication methods was added in the OIDC realm in elastic#58708. This change adds the `rp.client_auth_method` in the realm settings reference doc.
Pinging @elastic/es-docs (Team:Docs) |
Pinging @elastic/es-security (Team:Security) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should we also document rp.client_auth_jwt_signature_algorithm
while we are here?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
typo Co-authored-by: Yang Wang <[email protected]>
// tag::rp-client-auth-method-tag[] | ||
`rp.client_auth_method` {ess-icon}:: | ||
(<<static-cluster-setting, Static>>) | ||
The Client authentication method used by elasticsearch as a client to authenticate |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Feels one of the two occurrences of "client" is redundant:
The Client authentication method used by elasticsearch as a client to authenticate | |
The authentication method used by {es} as a client to authenticate |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'll change the {es} thanks ! but it's called "Client authentication" in OpenID Connect , so I will leave this here ( not capitalized)
`rp.client_auth_signature_algorithm` {ess-icon}:: | ||
(<<static-cluster-setting, Static>>) | ||
The signature algorithm that {es} uses to sign the JWT with which it authenticates | ||
as a Client to the OpenID Connect Provider when `client_secret_jwt` is selected for |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Unless this is a specific client that is always capitalized, I think it should be lowercase:
as a Client to the OpenID Connect Provider when `client_secret_jwt` is selected for | |
as a client to the OpenID Connect Provider when `client_secret_jwt` is selected for |
Support for additional Client authentication methods was added in the OIDC realm in elastic#58708. This change adds the `rp.client_auth_method` and `rp.client_auth_signature_algorithm` settings in the realm settings reference doc.
Support for additional Client authentication methods was added in the OIDC realm in elastic#58708. This change adds the `rp.client_auth_method` and `rp.client_auth_signature_algorithm` settings in the realm settings reference doc.
Support for additional Client authentication methods was added in the OIDC realm in elastic#58708. This change adds the `rp.client_auth_method` and `rp.client_auth_signature_algorithm` settings in the realm settings reference doc.
Support for additional Client authentication methods was added in the OIDC realm in elastic#58708. This change adds the `rp.client_auth_method` and `rp.client_auth_signature_algorithm` settings in the realm settings reference doc.
Support for additional Client authentication methods was added in
the OIDC realm in #58708. This change adds the
rp.client_auth_method
in the realm settings reference doc.