Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Minor updates to OIDC docs #6551

Merged
merged 1 commit into from
Apr 8, 2019
Merged

Minor updates to OIDC docs #6551

merged 1 commit into from
Apr 8, 2019

Conversation

kalafut
Copy link
Contributor

@kalafut kalafut commented Apr 8, 2019

No description provided.

@kalafut kalafut requested a review from ncabatoff April 8, 2019 20:52
@@ -102,8 +102,8 @@ entities attempting to login. At least one of the bound values must be set.
### Parameters
- `name` `(string: <required>)` - Name of the role.
- `role_type` `(string: <optional>)` - Type of role, either "oidc" (default) or "jwt".
- `bound_audiences` `(array: <required>)` - List of `aud` claims to match
Copy link
Collaborator

@ncabatoff ncabatoff Apr 8, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggest instead:

bound_audiences (array: <optional>) - Required for "jwt" roles, optional for "oidc" roles. List of aud claims to match against. Any match is sufficient.

That way jwt people skimming / reading too quickly are less likely to overlook it.

But your way is fine too.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I authored it that way at first, but decided the current way is OK since: a) we expect more OIDC use now that it's available b) if they omit it during the JWT role creation, they'll get an error saying it's required.

@kalafut kalafut merged commit b10dc70 into master Apr 8, 2019
@kalafut kalafut deleted the jwt-docs-update branch April 8, 2019 22:08
kalafut added a commit that referenced this pull request Apr 8, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants