openid-configuration not using https host
Overview
While trying to test an OIDC feature, I am unable to add the GDK instance (via gitpod) to an authentication provider. The provider is unable to get the fingerprint from the server. The provider (AWS) requires an https endpoint. If I add gitlab.com
there is no problem. Using GDK throws an error and I noticed a difference in the response.
gitlab.com returns HTTPS "authorization_endpoint":"https://gitlab.com/oauth/authorize"
where GDK returns HTTP "authorization_endpoint":"http://3000-indigo-llama-g8i5x9pv.ws-us17.gitpod.io/oauth/authorize"
Is there a configuration for this?
Steps to replicate (optional)
$ curl https://gitlab.com/.well-known/openid-configuration
{"issuer":"https://gitlab.com","authorization_endpoint":"https://gitlab.com/oauth/authorize","token_endpoint":"https://gitlab.com/oauth/token","revocation_endpoint":"https://gitlab.com/oauth/revoke","introspection_endpoint":"https://gitlab.com/oauth/introspect","userinfo_endpoint":"https://gitlab.com/oauth/userinfo","jwks_uri":"https://gitlab.com/oauth/discovery/keys","scopes_supported":["api","read_user","read_api","read_repository","write_repository","read_registry","write_registry","sudo","openid","profile","email"],"response_types_supported":["code","token"],"response_modes_supported":["query","fragment"],"grant_types_supported":["authorization_code","implicit","password","client_credentials","refresh_token"],"token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_post"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256"],"claim_types_supported":["normal"],"claims_supported":["iss","sub","aud","exp","iat","sub_legacy","name","nickname","email","email_verified","website","profile","picture","groups","groups_direct"]}
$
$
$
$ curl https://3000-indigo-llama-g8i5x9pv.ws-us17.gitpod.io/.well-known/openid-configuration
{"issuer":"https://3000-indigo-llama-g8i5x9pv.ws-us17.gitpod.io","authorization_endpoint":"http://3000-indigo-llama-g8i5x9pv.ws-us17.gitpod.io/oauth/authorize","token_endpoint":"http://3000-indigo-llama-g8i5x9pv.ws-us17.gitpod.io/oauth/token","revocation_endpoint":"http://3000-indigo-llama-g8i5x9pv.ws-us17.gitpod.io/oauth/revoke","introspection_endpoint":"http://3000-indigo-llama-g8i5x9pv.ws-us17.gitpod.io/oauth/introspect","userinfo_endpoint":"http://3000-indigo-llama-g8i5x9pv.ws-us17.gitpod.io/oauth/userinfo","jwks_uri":"http://3000-indigo-llama-g8i5x9pv.ws-us17.gitpod.io/oauth/discovery/keys","scopes_supported":["api","read_user","read_api","read_repository","write_repository","sudo","openid","profile","email"],"response_types_supported":["code","token"],"response_modes_supported":["query","fragment"],"grant_types_supported":["authorization_code","implicit","password","client_credentials","refresh_token"],"token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_post"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256"],"claim_types_supported":["normal"],"claims_supported":["iss","sub","aud","exp","iat","sub_legacy","name","nickname","email","email_verified","website","profile","picture","groups","groups_direct"]}
Proposal (optional)
Environment (optional)
- Operating system: gitpod
- The contents of your
gdk.yml
default - Ruby version:
<!-- output of
ruby --version-->
- GDK version:
<!-- output of
git rev-parse --short HEAD-->
MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/72555