Skip to content

Add support for mTLS between proxy and OIDC issuer #352

@alegacy

Description

@alegacy

To support operating in environments that enforce/require client TLS certificates it would be helpful to support mTLS configurability between the proxy and the OIDC issuer.

This would involving adding new command line arguments to specify a TLS certificate and private key. For example, something like:

	flagset.StringVar(&o.Auth.Authentication.OIDC.ClientCertFile, "oidc-client-cert-file", "", "If set, the client certificate will be used to authenticate the proxy to the OIDC server. Requires --oidc-client-key-file to be set, too.")
	flagset.StringVar(&o.Auth.Authentication.OIDC.ClientKeyFile, "oidc-client-key-file", "", "The key matching the certificate from --oidc-client-cert-file. If set, requires --oidc-client-cert-file to be set, too.")

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions